# GitLab in August 2025: incidents, uptime and changes

> GitLab in August 2025: 7 incidents on its status page (4 major or critical), 97.02% free of major or critical incidents (vendor-reported), 18 CVEs. From Rewindex’s archive of GitLab’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/gitlab/2025/08
Last updated: 2026-06-17T10:07:35Z

- Incidents posted: 7 (major/critical: 4) · Maintenance: 2
- By vendor impact label: critical 1, major 3, minor 3
- Uptime (vendor-reported): 97.02% free of major/critical incidents, 95.10% free of any incident; outage time 19 h 20 min, incident time 31 h 47 min (partial month)
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 18
- Previous month: [July 2025](https://rewindex.com/company/gitlab/2025/07.md) · Next: [September 2025](https://rewindex.com/company/gitlab/2025/09.md) · [All months](https://rewindex.com/company/gitlab/reports.md) · [GitLab](https://rewindex.com/company/gitlab.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Increase in account verification failures](https://rewindex.com/company/gitlab/incidents/68abb04ac58818058c8be1db.md) | critical | 2025-08-25 00:37 UTC | 2025-08-25 03:14 UTC | 2.6 h | resolved |
| [Long Queue Times on Shared Runners](https://rewindex.com/company/gitlab/incidents/68913811f7010b05ea72a0d6.md) | major | 2025-08-04 22:45 UTC | 2025-08-05 03:38 UTC | 4.9 h | resolved |
| [Duo Agentic chat not working in web](https://rewindex.com/company/gitlab/incidents/68ac19a1af9561052fade807.md) | major | 2025-08-25 08:06 UTC | 2025-08-25 14:19 UTC | 6.2 h | resolved |
| [500 Errors while pushing file rename to remote when secret detection enabled](https://rewindex.com/company/gitlab/incidents/68af1ed4bd4a8f057756afaa.md) | major | 2025-08-27 15:05 UTC | 2025-08-27 20:42 UTC | 5.6 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Long Queue Times on Shared Runners](https://rewindex.com/company/gitlab/incidents/68913811f7010b05ea72a0d6.md) | major | 2025-08-04 22:45 UTC | 2025-08-05 03:38 UTC | 4.9 h | resolved |
| [500 errors on gitlab-org/gitlab repository](https://rewindex.com/company/gitlab/incidents/689f6427f7010b05ea72a9e4.md) | minor | 2025-08-15 16:45 UTC | 2025-08-15 21:18 UTC | 4.5 h | resolved |
| [Spike of 400 errors on the /oauth/token endpoint](https://rewindex.com/company/gitlab/incidents/68a704148b984405a33ebd51.md) | minor | 2025-08-21 11:33 UTC | 2025-08-21 14:53 UTC | 3.3 h | resolved |
| [Increase in account verification failures](https://rewindex.com/company/gitlab/incidents/68abb04ac58818058c8be1db.md) | critical | 2025-08-25 00:37 UTC | 2025-08-25 03:14 UTC | 2.6 h | resolved |
| [Duo Agentic chat not working in web](https://rewindex.com/company/gitlab/incidents/68ac19a1af9561052fade807.md) | major | 2025-08-25 08:06 UTC | 2025-08-25 14:19 UTC | 6.2 h | resolved |
| [500 Errors while pushing file rename to remote when secret detection enabled](https://rewindex.com/company/gitlab/incidents/68af1ed4bd4a8f057756afaa.md) | major | 2025-08-27 15:05 UTC | 2025-08-27 20:42 UTC | 5.6 h | resolved |
| [Issue with CI jobs in pending state not being picked up](https://rewindex.com/company/gitlab/incidents/68b0673acb3a7d0505e193e7.md) | minor | 2025-08-28 14:27 UTC | 2025-08-28 19:01 UTC | 4.6 h | resolved |

## CVEs published

- [CVE-2025-8770](https://rewindex.com/cve/CVE-2025-8770.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 6.5), published 2025-08-13
- [CVE-2025-7734](https://rewindex.com/cve/CVE-2025-7734.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2025-08-13
- [CVE-2025-7739](https://rewindex.com/cve/CVE-2025-7739.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2025-08-13
- [CVE-2025-6186](https://rewindex.com/cve/CVE-2025-6186.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2025-08-13
- [CVE-2025-5819](https://rewindex.com/cve/CVE-2025-5819.md) Incorrect Permission Assignment for Critical Resource in GitLab (CVSS 5.0), published 2025-08-13
- [CVE-2025-2937](https://rewindex.com/cve/CVE-2025-2937.md) Inefficient Regular Expression Complexity in GitLab (CVSS 6.5), published 2025-08-13
- [CVE-2025-2614](https://rewindex.com/cve/CVE-2025-2614.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-08-13
- [CVE-2025-2498](https://rewindex.com/cve/CVE-2025-2498.md) Insufficient Granularity of Access Control in GitLab (CVSS 3.1), published 2025-08-13
- [CVE-2025-1477](https://rewindex.com/cve/CVE-2025-1477.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-08-13
- [CVE-2024-12303](https://rewindex.com/cve/CVE-2024-12303.md) Incorrect Privilege Assignment in GitLab (CVSS 6.7), published 2025-08-13
- [CVE-2024-10219](https://rewindex.com/cve/CVE-2024-10219.md) Incorrect Authorization in GitLab (CVSS 6.5), published 2025-08-13
- [CVE-2025-8713](https://rewindex.com/cve/CVE-2025-8713.md) PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table (CVSS 3.1), published 2025-08-14
- [CVE-2025-8714](https://rewindex.com/cve/CVE-2025-8714.md) PostgreSQL pg\_dump lets superuser of origin server execute arbitrary code in psql client (CVSS 8.8), published 2025-08-14
- [CVE-2025-8715](https://rewindex.com/cve/CVE-2025-8715.md) PostgreSQL pg\_dump newline in object name executes arbitrary code in psql client and in restore target server (CVSS 8.8), published 2025-08-14
- [CVE-2025-5101](https://rewindex.com/cve/CVE-2025-5101.md) Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 5.0), published 2025-08-27
- [CVE-2025-4225](https://rewindex.com/cve/CVE-2025-4225.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 5.3), published 2025-08-27
- [CVE-2025-3601](https://rewindex.com/cve/CVE-2025-3601.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-08-27
- [CVE-2025-2246](https://rewindex.com/cve/CVE-2025-2246.md) Missing Authorization in GitLab (CVSS 5.8), published 2025-08-27

## Maintenance

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Gitaly Storage Node Upgrade](https://rewindex.com/company/gitlab/incidents/68935a5dcfb5e305f859d955.md) | maintenance | 2025-08-22 12:00 UTC | 2025-08-24 14:00 UTC | 2 d | completed |
| [Gitaly Storage Node Upgrade](https://rewindex.com/company/gitlab/incidents/68a618bc7aefd305edfbeb0f.md) | maintenance | 2025-08-30 12:00 UTC | 2025-08-31 14:00 UTC | 26 h | completed |

## Cite this

GitLab posted 7 status incidents in August 2025 (4 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/gitlab/2025/08
- Citation: GitLab, “GitLab in August 2025” (2025-08-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/gitlab/2025/08 (CC BY 4.0).
- Markdown link: `[GitLab: GitLab in August 2025 (2025-08-01)](https://rewindex.com/company/gitlab/2025/08)`


---
Canonical: https://rewindex.com/company/gitlab/2025/08 · Markdown: https://rewindex.com/company/gitlab/2025/08.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T14:47:02.568Z