# GitLab in February 2025: incidents, uptime and changes

> GitLab in February 2025: 0 incidents on its status page (0 major or critical), 19 CVEs. From Rewindex’s archive of GitLab’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/gitlab/2025/02
Last updated: 2026-06-17T08:38:36Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): — free of major/critical incidents, — free of any incident; outage time 0 min, incident time 0 min (partial month)
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 19
- Previous month: [January 2025](https://rewindex.com/company/gitlab/2025/01.md) · Next: [March 2025](https://rewindex.com/company/gitlab/2025/03.md) · [All months](https://rewindex.com/company/gitlab/reports.md) · [GitLab](https://rewindex.com/company/gitlab.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2023-6386](https://rewindex.com/cve/CVE-2023-6386.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-02-05
- [CVE-2024-1539](https://rewindex.com/cve/CVE-2024-1539.md) Missing Authorization in GitLab (CVSS 4.3), published 2025-02-05
- [CVE-2024-6356](https://rewindex.com/cve/CVE-2024-6356.md) Incorrect User Management in GitLab (CVSS 4.4), published 2025-02-05
- [CVE-2024-9631](https://rewindex.com/cve/CVE-2024-9631.md) Inefficient Algorithmic Complexity in GitLab (CVSS 7.5), published 2025-02-05
- [CVE-2024-5528](https://rewindex.com/cve/CVE-2024-5528.md) Incomplete Comparison with Missing Factors in GitLab (CVSS 3.5), published 2025-02-05
- [CVE-2024-3976](https://rewindex.com/cve/CVE-2024-3976.md) Missing Authorization in GitLab (CVSS 6.5), published 2025-02-05
- [CVE-2024-2878](https://rewindex.com/cve/CVE-2024-2878.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5), published 2025-02-05
- [CVE-2025-1072](https://rewindex.com/cve/CVE-2025-1072.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-02-07
- [CVE-2024-10383](https://rewindex.com/cve/CVE-2024-10383.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode Fork (CVSS 8.7), published 2025-02-07
- [CVE-2025-1042](https://rewindex.com/cve/CVE-2025-1042.md) Files or Directories Accessible to External Parties in GitLab (CVSS 4.9), published 2025-02-12
- [CVE-2025-1212](https://rewindex.com/cve/CVE-2025-1212.md) Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab (CVSS 4.3), published 2025-02-12
- [CVE-2025-0376](https://rewindex.com/cve/CVE-2025-0376.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2025-02-12
- [CVE-2024-12379](https://rewindex.com/cve/CVE-2024-12379.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-02-12
- [CVE-2025-0516](https://rewindex.com/cve/CVE-2025-0516.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2025-02-12
- [CVE-2024-9870](https://rewindex.com/cve/CVE-2024-9870.md) Unintended Proxy or Intermediary ('Confused Deputy') in GitLab (CVSS 4.3), published 2025-02-12
- [CVE-2024-8266](https://rewindex.com/cve/CVE-2024-8266.md) Execution with Unnecessary Privileges in GitLab (CVSS 4.4), published 2025-02-13
- [CVE-2024-7102](https://rewindex.com/cve/CVE-2024-7102.md) Execution with Unnecessary Privileges in GitLab (CVSS 9.6), published 2025-02-13
- [CVE-2025-1198](https://rewindex.com/cve/CVE-2025-1198.md) Insufficient Session Expiration in GitLab (CVSS 4.2), published 2025-02-13
- [CVE-2024-3303](https://rewindex.com/cve/CVE-2024-3303.md) Improper Neutralization of Input Used for LLM Prompting in GitLab (CVSS 6.4), published 2025-02-13

## Cite this

GitLab posted 0 status incidents in February 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/gitlab/2025/02
- Citation: GitLab, “GitLab in February 2025” (2025-02-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/gitlab/2025/02 (CC BY 4.0).
- Markdown link: `[GitLab: GitLab in February 2025 (2025-02-01)](https://rewindex.com/company/gitlab/2025/02)`


---
Canonical: https://rewindex.com/company/gitlab/2025/02 · Markdown: https://rewindex.com/company/gitlab/2025/02.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:54:09.520Z