CompaniesGitLabMonthly reportsSeptember 2025
GitLab in September 2025: incidents, uptime and changes
Vendor-reported outage time 11 h 9 min, incident time 14 h 8 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 1 · Major 5 · Minor 2 · No impact listed 1
Major and critical incidents 6
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| GitLab CI/CD jobs not running | Critical | 3.0 h | resolved | 09-23 | |
| GitLab Duo Chat (classic) returning errors | Major | 1.0 h | resolved | 09-04 | |
| Elevated errors in rails_request component for AI-assisted services | Major | 1.8 h | resolved | 09-09 | |
| The gitlab-org group is experiencing 500 errors | Major | 54 min | resolved | 09-10 | |
| Docker hub incident causing job failures | Major | 1.2 h | resolved | 09-25 | |
| Self-managed runners seeing 401 when picking jobs | Major | 3.3 h | resolved | 09-29 |
Other incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Service degradation on GitLab.com | Minor | 59 min | resolved | 09-15 | |
| Rate Limiting Errors on GitLab.com | Minor | 2.0 h | resolved | 09-17 | |
| Epic board render issues | No impact listed | 14 h | resolved | 09-23 |
CVEs published
- CVE-2025-10094 Improper Validation of Specified Quantity in Input in GitLab (CVSS 6.5)
- CVE-2025-7337 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-6769 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab (CVSS 4.3)
- CVE-2025-6454 Server-Side Request Forgery (SSRF) in GitLab (CVSS 8.5)
- CVE-2025-2256 Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5)
- CVE-2025-1250 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-10871 Missing Authorization in GitLab (CVSS 3.8)
- CVE-2025-10867 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 3.5)
- CVE-2025-10858 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2025-9958 Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 7.7)
- CVE-2025-9642 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2025-7691 Privilege Defined With Unsafe Actions in GitLab (CVSS 6.5)
- CVE-2025-10868 Business Logic Errors in GitLab (CVSS 3.5)
- CVE-2025-5069 Incorrect Ownership Assignment in GitLab (CVSS 3.5)
- CVE-2025-11042 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 4.3)
- CVE-2025-8014 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
Maintenance 1
Show scheduled maintenance
Cite this
GitLab posted 9 status incidents in September 2025 (6 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in September 2025
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2025/09