← All credits

Thanks [toofikz](https://hackerone.com/toofikz) for reporting this vulnerability through our HackerOne bug bounty program

3 vulnerability records and advisories credit this contributor.

CVE-2026-7514
Missing Authorization in GitLab
CVE-2026-14351
Exposure of Sensitive Information Through Metadata in GitLab
CVE-2026-6335
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab