← All credits
Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program
104 vulnerability records and advisories credit this contributor.
CVE-2026-3254
Improper Restriction of Rendered UI Layers or Frames in GitLab
CVE-2026-0595
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-9958
Insertion of Sensitive Information Into Sent Data in GitLab
CVE-2025-9825
Missing Authorization in GitLab
CVE-2025-9642
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-7734
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-6186
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-4700
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-4439
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-4278
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab