CompaniesGitLabMonthly reportsJanuary 2026
GitLab in January 2026: incidents, uptime and changes
7incidents posted
4labelled major or critical
84.38%free of major/critical
83.17%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 4.8 days, incident time 5.2 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 1 · Major 3 · Minor 3
Major and critical incidents 4
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| GitLab.com Pipelines Cannot be Run | Critical | 20 min | resolved | 01-28 | |
| Pipelines failing with 502 error | Major | 10.0 h | resolved | 01-16 | |
| Foundational Flows Feature Availability | Major | 4 d | resolved | 01-16 | |
| Error updating group Duo settings | Major | 6.1 h | resolved | 01-23 |
Other incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| GitLab.com Slow Performance | Minor | 1.4 h | resolved | 01-06 | |
| Degraded performance for classic Duo chat | Minor | 2.6 h | resolved | 01-08 | |
| Intermittent 404 errors when accessing GitLab.com repositories | Minor | 5.0 h | resolved | 01-26 |
CVEs published
- CVE-2025-13781 Missing Authorization in GitLab (CVSS 6.5)
- CVE-2025-13761 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.0)
- CVE-2025-13772 Missing Authorization in GitLab (CVSS 7.1)
- CVE-2025-11246 Insufficient Granularity of Access Control in GitLab (CVSS 5.4)
- CVE-2025-10569 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-9222 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2025-3950 Exposure of Private Personal Information to an Unauthorized Actor in GitLab (CVSS 3.5)
- CVE-2025-11224 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.7)
- CVE-2025-13335 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab (CVSS 6.5)
- CVE-2026-1102 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 5.3)
- CVE-2026-0723 Unchecked Return Value in GitLab (CVSS 7.4)
- CVE-2025-13927 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2025-13928 Incorrect Authorization in GitLab (CVSS 7.5)
Cite this
GitLab posted 7 status incidents in January 2026 (4 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in January 2026
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2026/01