← All credits
Thanks [yvvdwf](https://hackerone.com/yvvdwf) for reporting this vulnerability through our HackerOne bug bounty program
52 vulnerability records and advisories credit this contributor.
CVE-2026-79708
Incorrect Authorization in GitLab
CVE-2026-15216
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-15217
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-9222
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-6896
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-10086
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-7481
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-5377
Incorrect Authorization in GitLab
CVE-2026-1182
Improper Removal of Sensitive Information Before Storage or Transfer in GitLab
CVE-2026-1090
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab