[3nvz](https://hackerone.com/3nvz)
5 credited records · 5 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
17Monitor | CVE-2026-15387No exploit | Acceptance of Extraneous Untrusted Data With Trusted Data in GitLabgitlab · gitlab · CWE-349 | Medium4.3 | — | 0.2% | Aug 26, 2026 |
28Monitor | CVE-2026-16494No exploit | Missing Authorization in GitLabgitlab · gitlab · CWE-862 | High7.1 | — | 0.4% | Aug 12, 2026 |
36Monitor | CVE-2026-16627No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Critical9.0 | — | 0.5% | Aug 12, 2026 |
21Monitor | CVE-2026-6336No exploit | Incorrect Authorization in GitLabgitlab · gitlab · CWE-863 | Medium5.3 | — | 0.5% | Jul 29, 2026 |
17Monitor | CVE-2026-9694No exploit | Improper Neutralization of Substitution Characters in GitLabgitlab · gitlab · CWE-153 | Medium4.3 | — | 0.3% | Jun 11, 2026 |
- CVE-2026-1538717Monitor
Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab
MediumCVSS 4.3No exploitEPSS 0%gitlab · gitlabAug 26, 2026
- CVE-2026-1649428Monitor
Missing Authorization in GitLab
HighCVSS 7.1No exploitEPSS 0%gitlab · gitlabAug 12, 2026
- CVE-2026-1662736Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CriticalCVSS 9.0No exploitEPSS 0%gitlab · gitlabAug 12, 2026
- CVE-2026-633621Monitor
Incorrect Authorization in GitLab
MediumCVSS 5.3No exploitEPSS 0%gitlab · gitlabJul 29, 2026
- CVE-2026-969417Monitor
Improper Neutralization of Substitution Characters in GitLab
MediumCVSS 4.3No exploitEPSS 0%gitlab · gitlabJun 11, 2026