CVE-2026–10087: Cross-Site Scripting in GitLab EE Analytics Dashboard

When analytics dashboards become a client-side execution surface