← All credits
Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program
104 vulnerability records and advisories credit this contributor.
CVE-2025-2443
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-1908
Business Logic Errors in GitLab
CVE-2025-1763
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-14560
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-13929
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2025-12734
Improper Encoding or Escaping of Output in GitLab
CVE-2025-12562
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2025-11224
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-0555
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-0475
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab