← All credits

Thanks [thwin_htet](https://hackerone.com/thwin_htet) for reporting this vulnerability through our HackerOne bug bounty program

2 vulnerability records and advisories credit this contributor.

CVE-2026-18252
Inclusion of Functionality from Untrusted Control Sphere in GitLab
CVE-2026-6267
Insertion of Sensitive Information Into Sent Data in GitLab