GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Thanks [ahacker1](https://hackerone.com/ahacker1) for reporting this vulnerability through our HackerOne bug bounty program

8 vulnerability records and advisories credit this contributor.

CVE-2026-2104
Authorization Bypass Through User-Controlled Key in GitLab
CVE-2026-4868
Authorization Bypass Through User-Controlled Key in GitLab
CVE-2026-4922
Cross-Site Request Forgery (CSRF) in GitLab
CVE-2026-3857
Cross-Site Request Forgery (CSRF) in GitLab
CVE-2026-0723
Unchecked Return Value in GitLab
CVE-2024-4994
Cross-Site Request Forgery (CSRF) in GitLab
CVE-2024-3976
Missing Authorization in GitLab
CVE-2024-5655
Improper Access Control in GitLab