← All credits
Thanks [yvvdwf](https://hackerone.com/yvvdwf) for reporting this vulnerability through our HackerOne bug bounty program
52 vulnerability records and advisories credit this contributor.
CVE-2026-7481
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2023-6371
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2024-2279
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2023-5356
Incorrect Authorization in GitLab
CVE-2023-5933
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab
CVE-2026-5377
Incorrect Authorization in GitLab
CVE-2026-1090
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-1182
Improper Removal of Sensitive Information Before Storage or Transfer in GitLab
CVE-2025-6948
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-12716
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab