joaxcar
114 credited records · 21 in the last 12 months · 1 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2026-110264Proof of concept | Integer Overflow or Wraparound in GitLabgitlab · gitlab · CWE-190 | Critical10.0 | — | 1.3% | Oct 22, 2026 |
91Now | CVE-2026-97229Weaponized | Integer Overflow or Wraparound in GitLabgitlab · gitlab · CWE-190 | Critical10.0 | KEV | 69.2% | Oct 13, 2026 |
23Monitor | CVE-2026-7767No exploit | URL Redirection to Untrusted Site ('Open Redirect') in GitLabgitlab · gitlab · CWE-601 | Medium5.8 | — | 0.2% | Oct 13, 2026 |
34Monitor | CVE-2026-84739No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | High8.7 | — | 0.3% | Sep 29, 2026 |
39Monitor | CVE-2026-93577No exploit | Integer Overflow or Wraparound in GitLabgitlab · gitlab · CWE-190 | Critical9.9 | — | 0.6% | Sep 24, 2026 |
39Monitor | CVE-2026-89078No exploit | Double Free in GitLabgitlab · gitlab · CWE-415 | Critical9.9 | — | 0.5% | Sep 24, 2026 |
30Monitor | CVE-2026-1168No exploit | Allocation of Resources Without Limits or Throttling in GitLabgitlab · gitlab · CWE-770 | High7.5 | — | 0.6% | Sep 16, 2026 |
34Monitor | CVE-2026-88765No exploit | Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLabgitlab · gitlab · CWE-77 | High8.5 | — | 0.6% | Sep 15, 2026 |
24Monitor | CVE-2026-10712No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Medium6.1 | — | 0.4% | Jun 25, 2026 |
21Monitor | CVE-2026-6073No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Medium5.4 | — | 0.1% | May 14, 2026 |
32Monitor | CVE-2026-5816No exploit | Improper Resolution of Path Equivalence in GitLabgitlab · gitlab · CWE-41 | High8.1 | — | 0.4% | Apr 22, 2026 |
24Monitor | CVE-2026-5262No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Medium6.1 | — | 0.2% | Apr 22, 2026 |
14Monitor | CVE-2026-3254No exploit | Improper Restriction of Rendered UI Layers or Frames in GitLabgitlab · gitlab · CWE-1021 | Low3.5 | — | 0.1% | Apr 22, 2026 |
30Monitor | CVE-2025-13929No exploit | Allocation of Resources Without Limits or Throttling in GitLabgitlab · gitlab · CWE-770 | High7.5 | — | 0.5% | Mar 11, 2026 |
21Monitor | CVE-2026-0595No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Medium5.4 | — | 0.2% | Feb 11, 2026 |
21Monitor | CVE-2025-14560No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Medium5.4 | — | 0.2% | Feb 11, 2026 |
21Monitor | CVE-2025-11224No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Medium5.4 | — | 0.3% | Jan 14, 2026 |
38Monitor | CVE-2025-13761No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Critical9.6 | — | 0.6% | Jan 9, 2026 |
14Monitor | CVE-2025-12734No exploit | Improper Encoding or Escaping of Output in GitLabgitlab · gitlab · CWE-116 | Low3.5 | — | 0.2% | Dec 11, 2025 |
30Monitor | CVE-2025-12562No exploit | Allocation of Resources Without Limits or Throttling in GitLabgitlab · gitlab · CWE-770 | High7.5 | — | 0.8% | Dec 11, 2025 |
26Monitor | CVE-2025-9825No exploit | Missing Authorization in GitLabgitlab · gitlab · CWE-862 | Medium6.5 | — | 0.3% | Nov 21, 2025 |
30Monitor | CVE-2025-9958No exploit | Insertion of Sensitive Information Into Sent Data in GitLabgitlab · gitlab · CWE-201 | High7.7 | — | 0.5% | Sep 26, 2025 |
38Monitor | CVE-2025-9642No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Critical9.6 | — | 0.5% | Sep 26, 2025 |
21Monitor | CVE-2025-7734No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Medium5.4 | — | 0.3% | Aug 13, 2025 |
21Monitor | CVE-2025-6186No exploit | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Medium5.4 | — | 0.3% | Aug 13, 2025 |
- CVE-2026-11026440Plan
Integer Overflow or Wraparound in GitLab
CriticalCVSS 10.0Proof of conceptEPSS 1%gitlab · gitlabOct 22, 2026
- CVE-2026-9722991Now
Integer Overflow or Wraparound in GitLab
CriticalCVSS 10.0KEVWeaponizedEPSS 69%gitlab · gitlabOct 13, 2026
- CVE-2026-776723Monitor
URL Redirection to Untrusted Site ('Open Redirect') in GitLab
MediumCVSS 5.8No exploitEPSS 0%gitlab · gitlabOct 13, 2026
- CVE-2026-8473934Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
HighCVSS 8.7No exploitEPSS 0%gitlab · gitlabSep 29, 2026
- CVE-2026-9357739Monitor
Integer Overflow or Wraparound in GitLab
CriticalCVSS 9.9No exploitEPSS 0%gitlab · gitlabSep 24, 2026
- CVE-2026-8907839Monitor
Double Free in GitLab
CriticalCVSS 9.9No exploitEPSS 0%gitlab · gitlabSep 24, 2026
- CVE-2026-116830Monitor
Allocation of Resources Without Limits or Throttling in GitLab
HighCVSS 7.5No exploitEPSS 0%gitlab · gitlabSep 16, 2026
- CVE-2026-8876534Monitor
Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
HighCVSS 8.5No exploitEPSS 0%gitlab · gitlabSep 15, 2026
- CVE-2026-1071224Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
MediumCVSS 6.1No exploitEPSS 0%gitlab · gitlabJun 25, 2026
- CVE-2026-607321Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
MediumCVSS 5.4No exploitEPSS 0%gitlab · gitlabMay 14, 2026
- CVE-2026-581632Monitor
Improper Resolution of Path Equivalence in GitLab
HighCVSS 8.1No exploitEPSS 0%gitlab · gitlabApr 22, 2026
- CVE-2026-526224Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
MediumCVSS 6.1No exploitEPSS 0%gitlab · gitlabApr 22, 2026
- CVE-2026-325414Monitor
Improper Restriction of Rendered UI Layers or Frames in GitLab
LowCVSS 3.5No exploitEPSS 0%gitlab · gitlabApr 22, 2026
- CVE-2025-1392930Monitor
Allocation of Resources Without Limits or Throttling in GitLab
HighCVSS 7.5No exploitEPSS 0%gitlab · gitlabMar 11, 2026
- CVE-2026-059521Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
MediumCVSS 5.4No exploitEPSS 0%gitlab · gitlabFeb 11, 2026
- CVE-2025-1456021Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
MediumCVSS 5.4No exploitEPSS 0%gitlab · gitlabFeb 11, 2026
- CVE-2025-1122421Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
MediumCVSS 5.4No exploitEPSS 0%gitlab · gitlabJan 14, 2026
- CVE-2025-1376138Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CriticalCVSS 9.6No exploitEPSS 0%gitlab · gitlabJan 9, 2026
- CVE-2025-1273414Monitor
Improper Encoding or Escaping of Output in GitLab
LowCVSS 3.5No exploitEPSS 0%gitlab · gitlabDec 11, 2025
- CVE-2025-1256230Monitor
Allocation of Resources Without Limits or Throttling in GitLab
HighCVSS 7.5No exploitEPSS 0%gitlab · gitlabDec 11, 2025
- CVE-2025-982526Monitor
Missing Authorization in GitLab
MediumCVSS 6.5No exploitEPSS 0%gitlab · gitlabNov 21, 2025
- CVE-2025-995830Monitor
Insertion of Sensitive Information Into Sent Data in GitLab
HighCVSS 7.7No exploitEPSS 0%gitlab · gitlabSep 26, 2025
- CVE-2025-964238Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CriticalCVSS 9.6No exploitEPSS 0%gitlab · gitlabSep 26, 2025
- CVE-2025-773421Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
MediumCVSS 5.4No exploitEPSS 0%gitlab · gitlabAug 13, 2025
- CVE-2025-618621Monitor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
MediumCVSS 5.4No exploitEPSS 0%gitlab · gitlabAug 13, 2025