CompaniesGitLabMonthly reportsNovember 2025
GitLab in November 2025: incidents, uptime and changes
7incidents posted
4labelled major or critical
94.03%free of major/critical
86.31%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 42 h 55 min, incident time 4.1 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 4 · Minor 2 · No impact listed 1
Major and critical incidents 4
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Docker API version mismatch resulting in blocked deployments | Major | 26 h | resolved | 11-11 | |
| Mac OS runners can't create cache after upgrade | Major | 3.1 h | resolved | 11-14 | |
| A MacOS Runner is failing jobs | Major | 6.3 h | resolved | 11-21 | |
| Gitlab.com Pipeline failures when using inputs | Major | 7.6 h | resolved | 11-25 |
Other incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Unable to confirm secondary email address | Minor | 2 d | resolved | 11-08 | |
| GitLab.com sign in and deployments affected by upstream incident | No impact listed | 6.5 h | resolved | 11-18 | |
| GitLab.com experiencing degraded performance | Minor | 1.6 h | resolved | 11-20 |
CVEs published
- CVE-2025-11990 Improper Handling of URL Encoding (Hex Encoding) in GitLab (CVSS 3.1)
- CVE-2025-11865 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2025-7736 Incorrect Authorization in GitLab (CVSS 3.1)
- CVE-2025-7000 Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 4.3)
- CVE-2025-6171 Missing Authorization in GitLab (CVSS 5.3)
- CVE-2025-6945 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab (CVSS 3.5)
- CVE-2025-2615 Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 4.3)
- CVE-2025-12983 Memory Allocation with Excessive Size Value in GitLab (CVSS 3.5)
- CVE-2025-9825 Missing Authorization in GitLab (CVSS 5.0)
- CVE-2025-64720 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (CVSS 7.1)
- CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (CVSS 7.1)
- CVE-2025-13611 Insertion of Sensitive Information into Log File in GitLab (CVSS 2.0)
- CVE-2025-12653 Authentication Bypass by Spoofing in GitLab (CVSS 6.5)
- CVE-2025-12571 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2025-7449 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-6195 Direct Request ('Forced Browsing') in GitLab (CVSS 4.3)
Cite this
GitLab posted 7 status incidents in November 2025 (4 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in November 2025
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2025/11