[theluci](https://hackerone.com/theluci)

17 credited records · 5 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2026-12910No exploit	Missing Authentication for Critical Function in GitLabgitlab · gitlab · CWE-306 Auth bypass	Medium5.4	—	0.3%	Sep 15, 2026
12Monitor	CVE-2025-14562No exploit	Incorrect Authorization in GitLabgitlab · gitlab · CWE-863 Broken access control (IDOR)	Low3.1	—	0.2%	Jul 29, 2026
10Monitor	CVE-2025-9957No exploit	Incorrect Authorization in GitLabgitlab · gitlab · CWE-863 Broken access control (IDOR)	Low2.7	—	0.3%	Apr 22, 2026
10Monitor	CVE-2026-4916No exploit	Missing Authorization in GitLabgitlab · gitlab · CWE-862 Broken access control (IDOR)	Low2.7	—	0.3%	Apr 8, 2026
12Monitor	CVE-2026-1751No exploit	Missing Authorization in GitLabgitlab · gitlab · CWE-862 Pre-auth Broken access control (IDOR)	Low3.1	—	0.2%	Feb 2, 2026
17Monitor	CVE-2025-3396No exploit	Incorrect Authorization in GitLabgitlab · gitlab · CWE-863 Broken access control (IDOR)	Medium4.3	—	0.3%	Jul 10, 2025
21Monitor	CVE-2023-3509No exploit	Incorrect Authorization in GitLabgitlab · gitlab · CWE-863 Broken access control (IDOR)	Medium5.4	—	0.3%	Feb 21, 2024
30Monitor	CVE-2023-3904No exploit	Improper Validation of Specified Type of Input in GitLabgitlab · gitlab · CWE-1287 Pre-auth Denial of service	High7.5	—	0.7%	Dec 15, 2023
12Monitor	CVE-2023-4658No exploit	Incorrect Authorization in GitLabgitlab · gitlab · CWE-863 Broken access control (IDOR)	Low3.1	—	0.4%	Dec 1, 2023
30Monitor	CVE-2023-3399No exploit	Insertion of Sensitive Information Into Sent Data in GitLabgitlab · gitlab · CWE-201	High7.7	—	0.4%	Nov 6, 2023
17Monitor	CVE-2023-5198No exploit	Incorrect Authorization in GitLabgitlab · gitlab · CWE-863 Broken access control (IDOR)	Medium4.3	—	0.5%	Sep 29, 2023
17Monitor	CVE-2023-3979No exploit	Incorrect Authorization in GitLabgitlab · gitlab · CWE-863 Broken access control (IDOR)	Medium4.3	—	0.4%	Sep 29, 2023
17Monitor	CVE-2023-3920No exploit	Incorrect Authorization in GitLabgitlab · gitlab · CWE-863 Broken access control (IDOR)	Medium4.3	—	0.4%	Sep 29, 2023
17Monitor	CVE-2023-3115No exploit	Incorrect User Management in GitLabgitlab · gitlab · CWE-286	Medium4.3	—	0.4%	Sep 29, 2023
15Monitor	CVE-2023-2620No exploit	Insertion of Sensitive Information Into Sent Data in GitLabgitlab · gitlab · CWE-201	Low3.8	—	0.5%	Jul 12, 2023
19Monitor	CVE-2023-2485No exploit	Incorrect Privilege Assignment in GitLabgitlab · gitlab · CWE-266	Medium4.9	—	0.8%	Jun 7, 2023
17Monitor	CVE-2023-1204No exploit	An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 befogitlab · gitlab · CWE-347 Weak crypto	Medium4.3	—	0.5%	May 3, 2023

CVE-2026-12910
21Monitor
Missing Authentication for Critical Function in GitLab
MediumCVSS 5.4No exploitEPSS 0%
- Auth bypass
gitlab · gitlabSep 15, 2026
CVE-2025-14562
12Monitor
Incorrect Authorization in GitLab
LowCVSS 3.1No exploitEPSS 0%
- Broken access control (IDOR)
gitlab · gitlabJul 29, 2026
CVE-2025-9957
10Monitor
Incorrect Authorization in GitLab
LowCVSS 2.7No exploitEPSS 0%
- Broken access control (IDOR)
gitlab · gitlabApr 22, 2026
CVE-2026-4916
10Monitor
Missing Authorization in GitLab
LowCVSS 2.7No exploitEPSS 0%
- Broken access control (IDOR)
gitlab · gitlabApr 8, 2026
CVE-2026-1751
12Monitor
Missing Authorization in GitLab
LowCVSS 3.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
gitlab · gitlabFeb 2, 2026
CVE-2025-3396
17Monitor
Incorrect Authorization in GitLab
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
gitlab · gitlabJul 10, 2025
CVE-2023-3509
21Monitor
Incorrect Authorization in GitLab
MediumCVSS 5.4No exploitEPSS 0%
- Broken access control (IDOR)
gitlab · gitlabFeb 21, 2024
CVE-2023-3904
30Monitor
Improper Validation of Specified Type of Input in GitLab
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
gitlab · gitlabDec 15, 2023
CVE-2023-4658
12Monitor
Incorrect Authorization in GitLab
LowCVSS 3.1No exploitEPSS 0%
- Broken access control (IDOR)
gitlab · gitlabDec 1, 2023
CVE-2023-3399
30Monitor
Insertion of Sensitive Information Into Sent Data in GitLab
HighCVSS 7.7No exploitEPSS 0%
gitlab · gitlabNov 6, 2023
CVE-2023-5198
17Monitor
Incorrect Authorization in GitLab
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
gitlab · gitlabSep 29, 2023
CVE-2023-3979
17Monitor
Incorrect Authorization in GitLab
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
gitlab · gitlabSep 29, 2023
CVE-2023-3920
17Monitor
Incorrect Authorization in GitLab
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
gitlab · gitlabSep 29, 2023
CVE-2023-3115
17Monitor
Incorrect User Management in GitLab
MediumCVSS 4.3No exploitEPSS 0%
gitlab · gitlabSep 29, 2023
CVE-2023-2620
15Monitor
Insertion of Sensitive Information Into Sent Data in GitLab
LowCVSS 3.8No exploitEPSS 0%
gitlab · gitlabJul 12, 2023
CVE-2023-2485
19Monitor
Incorrect Privilege Assignment in GitLab
MediumCVSS 4.9No exploitEPSS 0%
gitlab · gitlabJun 7, 2023
CVE-2023-1204
17Monitor
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 befo
MediumCVSS 4.3No exploitEPSS 0%
- Weak crypto
gitlab · gitlabMay 3, 2023