# GitLab in March 2025: incidents, uptime and changes

> GitLab in March 2025: 0 incidents on its status page (0 major or critical), 24 CVEs. From Rewindex’s archive of GitLab’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/gitlab/2025/03
Last updated: 2026-06-17T09:07:45Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): — free of major/critical incidents, — free of any incident; outage time 0 min, incident time 0 min (partial month)
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 24
- Previous month: [February 2025](https://rewindex.com/company/gitlab/2025/02.md) · Next: [April 2025](https://rewindex.com/company/gitlab/2025/04.md) · [All months](https://rewindex.com/company/gitlab/reports.md) · [GitLab](https://rewindex.com/company/gitlab.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2024-8186](https://rewindex.com/cve/CVE-2024-8186.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 5.4), published 2025-03-03
- [CVE-2025-0475](https://rewindex.com/cve/CVE-2025-0475.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2025-03-03
- [CVE-2024-10925](https://rewindex.com/cve/CVE-2024-10925.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 5.3), published 2025-03-03
- [CVE-2025-0555](https://rewindex.com/cve/CVE-2025-0555.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.7), published 2025-03-03
- [CVE-2025-1540](https://rewindex.com/cve/CVE-2025-1540.md) Incorrect Authorization in GitLab (CVSS 3.1), published 2025-03-06
- [CVE-2025-2045](https://rewindex.com/cve/CVE-2025-2045.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2025-03-06
- [CVE-2025-27407](https://rewindex.com/cve/CVE-2025-27407.md) Remote code execution when loading a crafted GraphQL schema (CVSS 9.1), published 2025-03-12
- [CVE-2025-25291](https://rewindex.com/cve/CVE-2025-25291.md) ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) (CVSS 9.8), published 2025-03-12
- [CVE-2025-25292](https://rewindex.com/cve/CVE-2025-25292.md) Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) (CVSS 9.8), published 2025-03-12
- [CVE-2025-0652](https://rewindex.com/cve/CVE-2025-0652.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2025-03-13
- [CVE-2024-13054](https://rewindex.com/cve/CVE-2024-13054.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-03-13
- [CVE-2024-12380](https://rewindex.com/cve/CVE-2024-12380.md) Generation of Error Message Containing Sensitive Information in GitLab (CVSS 4.4), published 2025-03-13
- [CVE-2024-8402](https://rewindex.com/cve/CVE-2024-8402.md) Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab (CVSS 3.7), published 2025-03-13
- [CVE-2025-1257](https://rewindex.com/cve/CVE-2025-1257.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-03-13
- [CVE-2024-7296](https://rewindex.com/cve/CVE-2024-7296.md) Incorrect Authorization in GitLab (CVSS 2.7), published 2025-03-13
- [CVE-2024-55549](https://rewindex.com/cve/CVE-2024-55549.md)  (CVSS 7.8), published 2025-03-14
- [CVE-2025-24855](https://rewindex.com/cve/CVE-2025-24855.md)  (CVSS 7.8), published 2025-03-14
- [CVE-2025-2255](https://rewindex.com/cve/CVE-2025-2255.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2025-03-27
- [CVE-2025-2242](https://rewindex.com/cve/CVE-2025-2242.md) Incorrect Authorization in GitLab (CVSS 7.5), published 2025-03-27
- [CVE-2025-0811](https://rewindex.com/cve/CVE-2025-0811.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2025-03-27
- [CVE-2024-9773](https://rewindex.com/cve/CVE-2024-9773.md) Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab (CVSS 3.7), published 2025-03-27
- [CVE-2025-2867](https://rewindex.com/cve/CVE-2025-2867.md) Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 4.4), published 2025-03-27
- [CVE-2024-12619](https://rewindex.com/cve/CVE-2024-12619.md) Insufficient Granularity of Access Control in GitLab (CVSS 5.2), published 2025-03-28
- [CVE-2024-10307](https://rewindex.com/cve/CVE-2024-10307.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 4.3), published 2025-03-28

## Cite this

GitLab posted 0 status incidents in March 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/gitlab/2025/03
- Citation: GitLab, “GitLab in March 2025” (2025-03-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/gitlab/2025/03 (CC BY 4.0).
- Markdown link: `[GitLab: GitLab in March 2025 (2025-03-01)](https://rewindex.com/company/gitlab/2025/03)`


---
Canonical: https://rewindex.com/company/gitlab/2025/03 · Markdown: https://rewindex.com/company/gitlab/2025/03.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:54:12.180Z