CompaniesGitLabMonthly reportsMarch 2025
GitLab in March 2025: incidents, uptime and changes
0incidents posted
0labelled major or critical
—free of major/critical (partial)
—free of any incident
0price changes
0notable page changes
Vendor-reported outage time 0 min, incident time 0 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
Incidents 0
GitLab posted no incidents in March 2025.
CVEs published
- CVE-2024-8186 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 5.4)
- CVE-2025-0475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2024-10925 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 5.3)
- CVE-2025-0555 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.7)
- CVE-2025-1540 Incorrect Authorization in GitLab (CVSS 3.1)
- CVE-2025-2045 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2025-27407 Remote code execution when loading a crafted GraphQL schema (CVSS 9.1)
- CVE-2025-25291 ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) (CVSS 9.8)
- CVE-2025-25292 Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) (CVSS 9.8)
- CVE-2025-0652 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2024-13054 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2024-12380 Generation of Error Message Containing Sensitive Information in GitLab (CVSS 4.4)
- CVE-2024-8402 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab (CVSS 3.7)
- CVE-2025-1257 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2024-7296 Incorrect Authorization in GitLab (CVSS 2.7)
- CVE-2024-55549 (CVSS 7.8)
- CVE-2025-24855 (CVSS 7.8)
- CVE-2025-2255 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2025-2242 Incorrect Authorization in GitLab (CVSS 7.5)
- CVE-2025-0811 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab (CVSS 3.7)
- CVE-2025-2867 Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 4.4)
- CVE-2024-12619 Insufficient Granularity of Access Control in GitLab (CVSS 5.2)
- CVE-2024-10307 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 4.3)
Cite this
GitLab posted 0 status incidents in March 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in March 2025
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2025/03