CompaniesGitLabMonthly reportsAugust 2025
GitLab in August 2025: incidents, uptime and changes
7incidents posted
4labelled major or critical
97.02%free of major/critical (partial)
95.10%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 19 h 20 min, incident time 31 h 47 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 1 · Major 3 · Minor 3
Major and critical incidents 4
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Increase in account verification failures | Critical | 2.6 h | resolved | 08-25 | |
| Long Queue Times on Shared Runners | Major | 4.9 h | resolved | 08-04 | |
| Duo Agentic chat not working in web | Major | 6.2 h | resolved | 08-25 | |
| 500 Errors while pushing file rename to remote when secret detection enabled | Major | 5.6 h | resolved | 08-27 |
Other incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| 500 errors on gitlab-org/gitlab repository | Minor | 4.5 h | resolved | 08-15 | |
| Spike of 400 errors on the /oauth/token endpoint | Minor | 3.3 h | resolved | 08-21 | |
| Issue with CI jobs in pending state not being picked up | Minor | 4.6 h | resolved | 08-28 |
CVEs published
- CVE-2025-8770 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 6.5)
- CVE-2025-7734 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2025-7739 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2025-6186 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2025-5819 Incorrect Permission Assignment for Critical Resource in GitLab (CVSS 5.0)
- CVE-2025-2937 Inefficient Regular Expression Complexity in GitLab (CVSS 6.5)
- CVE-2025-2614 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-2498 Insufficient Granularity of Access Control in GitLab (CVSS 3.1)
- CVE-2025-1477 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2024-12303 Incorrect Privilege Assignment in GitLab (CVSS 6.7)
- CVE-2024-10219 Incorrect Authorization in GitLab (CVSS 6.5)
- CVE-2025-8713 PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table (CVSS 3.1)
- CVE-2025-8714 PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client (CVSS 8.8)
- CVE-2025-8715 PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server (CVSS 8.8)
- CVE-2025-5101 Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 5.0)
- CVE-2025-4225 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 5.3)
- CVE-2025-3601 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-2246 Missing Authorization in GitLab (CVSS 5.8)
Maintenance 2
Show scheduled maintenance
Cite this
GitLab posted 7 status incidents in August 2025 (4 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in August 2025
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2025/08