# GitLab in June 2025: incidents, uptime and changes

> GitLab in June 2025: 0 incidents on its status page (0 major or critical), 20 CVEs. From Rewindex’s archive of GitLab’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/gitlab/2025/06
Last updated: 2026-11-03T22:02:57Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): — free of major/critical incidents, — free of any incident; outage time 0 min, incident time 0 min (partial month)
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 20
- Previous month: [May 2025](https://rewindex.com/company/gitlab/2025/05.md) · Next: [July 2025](https://rewindex.com/company/gitlab/2025/07.md) · [All months](https://rewindex.com/company/gitlab/reports.md) · [GitLab](https://rewindex.com/company/gitlab.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2025-5996](https://rewindex.com/cve/CVE-2025-5996.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-06-12
- [CVE-2025-4278](https://rewindex.com/cve/CVE-2025-4278.md) Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab (CVSS 8.7), published 2025-06-12
- [CVE-2025-2254](https://rewindex.com/cve/CVE-2025-2254.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2025-06-12
- [CVE-2025-1516](https://rewindex.com/cve/CVE-2025-1516.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-06-12
- [CVE-2025-1478](https://rewindex.com/cve/CVE-2025-1478.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-06-12
- [CVE-2025-5195](https://rewindex.com/cve/CVE-2025-5195.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3), published 2025-06-12
- [CVE-2025-0673](https://rewindex.com/cve/CVE-2025-0673.md) Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab (CVSS 7.5), published 2025-06-12
- [CVE-2024-9512](https://rewindex.com/cve/CVE-2024-9512.md) Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab (CVSS 5.3), published 2025-06-12
- [CVE-2025-5982](https://rewindex.com/cve/CVE-2025-5982.md) Insufficient Granularity of Access Control in GitLab (CVSS 3.7), published 2025-06-12
- [CVE-2024-7586](https://rewindex.com/cve/CVE-2024-7586.md) Insertion of Sensitive Information into Log File in GitLab (CVSS 4.1), published 2025-06-20
- [CVE-2025-5121](https://rewindex.com/cve/CVE-2025-5121.md) Missing Authorization in GitLab (CVSS 8.5), published 2025-06-20
- [CVE-2025-2443](https://rewindex.com/cve/CVE-2025-2443.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2025-06-20
- [CVE-2024-4025](https://rewindex.com/cve/CVE-2024-4025.md) Inefficient Regular Expression Complexity in GitLab (CVSS 6.5), published 2025-06-20
- [CVE-2024-4994](https://rewindex.com/cve/CVE-2024-4994.md) Cross-Site Request Forgery (CSRF) in GitLab (CVSS 8.1), published 2025-06-20
- [CVE-2023-5600](https://rewindex.com/cve/CVE-2023-5600.md) Missing Authorization in GitLab (CVSS 3.1), published 2025-06-20
- [CVE-2025-5846](https://rewindex.com/cve/CVE-2025-5846.md) Missing Authorization in GitLab (CVSS 2.7), published 2025-06-26
- [CVE-2025-5315](https://rewindex.com/cve/CVE-2025-5315.md) Missing Authorization in GitLab (CVSS 4.3), published 2025-06-26
- [CVE-2025-3279](https://rewindex.com/cve/CVE-2025-3279.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-06-26
- [CVE-2025-2938](https://rewindex.com/cve/CVE-2025-2938.md) Business Logic Errors in GitLab (CVSS 3.1), published 2025-06-26
- [CVE-2025-1754](https://rewindex.com/cve/CVE-2025-1754.md) Missing Authentication for Critical Function in GitLab (CVSS 5.3), published 2025-06-26

## Cite this

GitLab posted 0 status incidents in June 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/gitlab/2025/06
- Citation: GitLab, “GitLab in June 2025” (2025-06-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/gitlab/2025/06 (CC BY 4.0).
- Markdown link: `[GitLab: GitLab in June 2025 (2025-06-01)](https://rewindex.com/company/gitlab/2025/06)`


---
Canonical: https://rewindex.com/company/gitlab/2025/06 · Markdown: https://rewindex.com/company/gitlab/2025/06.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T13:33:23.116Z