Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Inefficient Regular Expression Complexity in GitLab

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Improper Validation of Consistency within Input in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab's Zentao integration has an insecure direct object refe

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A malicious maintainer could exfiltrate a GitHub integratio

An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick users into visiting a trustworthy URL and being redirected to arbitrary content.

Business Logic Errors in GitLab