GitLab · disclosed reports
Authentication
9 disclosed reports · $18,580 paid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open GitLab on HackerOne- reports
- 9
- paid a bounty
- 3
Every one of the 9 is a mark on the map. Named now: 1 to 9, most upvoted first.
- Ability to bypass email verification for OAuth grants results in accounts takeovers on 3rd parties
- Mint Oauth2 access token for targeted user
- Login email verification bypass via `/oauth/token`.
- Access to GitLab's Slack by abusing issue creation from e-mail
- Exposure of a valid Gitlab-Workhorse JWT leading to various bad things
- Remote hacker can download all the files of master branch in public projects where everything is members only.
- Bypassing password authentication of users that have 2FA enabled
- Inadequate cache control in gitter allows to view private chat room
- Last pipeline status for MR leaked
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.