# GitLab in November 2025: incidents, uptime and changes > GitLab in November 2025: 7 incidents on its status page (4 major or critical), 94.03% free of major or critical incidents (vendor-reported), 16 CVEs. From Rewindex’s archive of GitLab’s status, pricing and policy pages. Canonical: https://rewindex.com/company/gitlab/2025/11 Last updated: 2026-10-19T13:10:00Z - Incidents posted: 7 (major/critical: 4) · Maintenance: 0 - By vendor impact label: major 4, minor 2, none 1 - Uptime (vendor-reported): 94.03% free of major/critical incidents, 86.31% free of any incident; outage time 42 h 55 min, incident time 4.1 days - Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 16 - Previous month: [October 2025](https://rewindex.com/company/gitlab/2025/10.md) · Next: [December 2025](https://rewindex.com/company/gitlab/2025/12.md) · [All months](https://rewindex.com/company/gitlab/reports.md) · [GitLab](https://rewindex.com/company/gitlab.md) _Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._ ## Major and critical incidents | Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status | | --- | --- | --- | --- | --- | --- | | [Docker API version mismatch resulting in blocked deployments](https://rewindex.com/company/gitlab/incidents/6913437876169705d96b0c2c.md) | major | 2025-11-11 14:08 UTC | 2025-11-12 16:05 UTC | 26 h | resolved | | [Mac OS runners can't create cache after upgrade](https://rewindex.com/company/gitlab/incidents/6916b5510a71c405ab9d12a9.md) | major | 2025-11-14 04:51 UTC | 2025-11-14 07:55 UTC | 3.1 h | resolved | | [A MacOS Runner is failing jobs](https://rewindex.com/company/gitlab/incidents/6920537eca14b604d6cb0a66.md) | major | 2025-11-21 11:56 UTC | 2025-11-21 18:15 UTC | 6.3 h | resolved | | [Gitlab.com Pipeline failures when using inputs](https://rewindex.com/company/gitlab/incidents/692512a686f26705f91527a1.md) | major | 2025-11-25 02:21 UTC | 2025-11-25 09:56 UTC | 7.6 h | resolved | ## All incidents | Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status | | --- | --- | --- | --- | --- | --- | | [Unable to confirm secondary email address](https://rewindex.com/company/gitlab/incidents/690e99856c478205e7901c69.md) | minor | 2025-11-08 01:14 UTC | 2025-11-10 07:14 UTC | 2 d | resolved | | [Docker API version mismatch resulting in blocked deployments](https://rewindex.com/company/gitlab/incidents/6913437876169705d96b0c2c.md) | major | 2025-11-11 14:08 UTC | 2025-11-12 16:05 UTC | 26 h | resolved | | [Mac OS runners can't create cache after upgrade](https://rewindex.com/company/gitlab/incidents/6916b5510a71c405ab9d12a9.md) | major | 2025-11-14 04:51 UTC | 2025-11-14 07:55 UTC | 3.1 h | resolved | | [GitLab.com sign in and deployments affected by upstream incident](https://rewindex.com/company/gitlab/incidents/691c69e0e55a8105f149573c.md) | none | 2025-11-18 12:43 UTC | 2025-11-18 19:12 UTC | 6.5 h | resolved | | [GitLab.com experiencing degraded performance](https://rewindex.com/company/gitlab/incidents/691e89fd2091640500ee7aa2.md) | minor | 2025-11-20 03:24 UTC | 2025-11-20 04:59 UTC | 1.6 h | resolved | | [A MacOS Runner is failing jobs](https://rewindex.com/company/gitlab/incidents/6920537eca14b604d6cb0a66.md) | major | 2025-11-21 11:56 UTC | 2025-11-21 18:15 UTC | 6.3 h | resolved | | [Gitlab.com Pipeline failures when using inputs](https://rewindex.com/company/gitlab/incidents/692512a686f26705f91527a1.md) | major | 2025-11-25 02:21 UTC | 2025-11-25 09:56 UTC | 7.6 h | resolved | ## CVEs published - [CVE-2025-11990](https://rewindex.com/cve/CVE-2025-11990.md) Improper Handling of URL Encoding (Hex Encoding) in GitLab (CVSS 3.1), published 2025-11-15 - [CVE-2025-11865](https://rewindex.com/cve/CVE-2025-11865.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2025-11-15 - [CVE-2025-7736](https://rewindex.com/cve/CVE-2025-7736.md) Incorrect Authorization in GitLab (CVSS 3.1), published 2025-11-15 - [CVE-2025-7000](https://rewindex.com/cve/CVE-2025-7000.md) Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 4.3), published 2025-11-15 - [CVE-2025-6171](https://rewindex.com/cve/CVE-2025-6171.md) Missing Authorization in GitLab (CVSS 5.3), published 2025-11-15 - [CVE-2025-6945](https://rewindex.com/cve/CVE-2025-6945.md) Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab (CVSS 3.5), published 2025-11-15 - [CVE-2025-2615](https://rewindex.com/cve/CVE-2025-2615.md) Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 4.3), published 2025-11-15 - [CVE-2025-12983](https://rewindex.com/cve/CVE-2025-12983.md) Memory Allocation with Excessive Size Value in GitLab (CVSS 3.5), published 2025-11-15 - [CVE-2025-9825](https://rewindex.com/cve/CVE-2025-9825.md) Missing Authorization in GitLab (CVSS 5.0), published 2025-11-21 - [CVE-2025-64720](https://rewindex.com/cve/CVE-2025-64720.md) LIBPNG is vulnerable to a buffer overflow in \`png\_image\_read\_composite\` via incorrect palette premultiplication (CVSS 7.1), published 2025-11-24 - [CVE-2025-65018](https://rewindex.com/cve/CVE-2025-65018.md) LIBPNG is vulnerable to a heap buffer overflow in \`png\_combine\_row\` triggered via \`png\_image\_finish\_read\` (CVSS 7.1), published 2025-11-24 - [CVE-2025-13611](https://rewindex.com/cve/CVE-2025-13611.md) Insertion of Sensitive Information into Log File in GitLab (CVSS 2.0), published 2025-11-26 - [CVE-2025-12653](https://rewindex.com/cve/CVE-2025-12653.md) Authentication Bypass by Spoofing in GitLab (CVSS 6.5), published 2025-11-26 - [CVE-2025-12571](https://rewindex.com/cve/CVE-2025-12571.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5), published 2025-11-26 - [CVE-2025-7449](https://rewindex.com/cve/CVE-2025-7449.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2025-11-26 - [CVE-2025-6195](https://rewindex.com/cve/CVE-2025-6195.md) Direct Request ('Forced Browsing') in GitLab (CVSS 4.3), published 2025-11-26 ## Cite this GitLab posted 7 status incidents in November 2025 (4 major or critical); 0 price changes and 0 notable page changes observed. - Canonical URL: https://rewindex.com/company/gitlab/2025/11 - Citation: GitLab, “GitLab in November 2025” (2025-11-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/gitlab/2025/11 (CC BY 4.0). - Markdown link: `[GitLab: GitLab in November 2025 (2025-11-01)](https://rewindex.com/company/gitlab/2025/11)` --- Canonical: https://rewindex.com/company/gitlab/2025/11 · Markdown: https://rewindex.com/company/gitlab/2025/11.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T11:01:03.560Z