CompaniesGitLabMonthly reportsDecember 2025
GitLab in December 2025: incidents, uptime and changes
7incidents posted
4labelled major or critical
97.14%free of major/critical
82.45%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 21 h 15 min, incident time 5.4 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 1 · Major 3 · Minor 3
Major and critical incidents 4
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| GitLab.com is down due to Cloudflare outage | Critical | 52 min | resolved | 12-05 | |
| Merged tab on Merge Requests Homepage is not loading | Major | 7.2 h | resolved | 12-01 | |
| Increase in errors when using SSH signatures | Major | 11 h | resolved | 12-10 | |
| Increased error rate for GitLab Duo Classic | Major | 1.9 h | resolved | 12-22 |
Other incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Commits API Returning Errors | Minor | 17 h | resolved | 12-08 | |
| Some CI/CD Jobs stuck in pending state | Minor | 4 d | resolved | 12-15 | |
| GitLab Duo Experiencing Response Errors | Minor | 2.2 h | resolved | 12-16 |
CVEs published
- CVE-2024-9183 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab (CVSS 7.7)
- CVE-2025-14157 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-13978 Generation of Error Message Containing Sensitive Information in GitLab (CVSS 4.3)
- CVE-2025-12716 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2025-12562 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2025-11984 Authentication Bypass Using an Alternate Path or Channel in GitLab (CVSS 6.8)
- CVE-2025-11247 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3)
- CVE-2025-8405 Improper Encoding or Escaping of Output in GitLab (CVSS 7.7)
- CVE-2025-4097 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-12734 Improper Encoding or Escaping of Output in GitLab (CVSS 3.5)
- CVE-2025-12029 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.0)
Cite this
GitLab posted 7 status incidents in December 2025 (4 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in December 2025
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2025/12