CompaniesGitLabMonthly reportsMarch 2026
GitLab in March 2026: incidents, uptime and changes
20incidents posted
16labelled major or critical
80.41%free of major/critical
77.00%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 6.1 days, incident time 7.1 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 3 · Major 13 · Minor 4
Major and critical incidents 16
Other incidents 4
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| CI/CD Job processing delay | Minor | 28 h | resolved | 03-10 | |
| CI Pipeline processing delays | Minor | 3.0 h | resolved | 03-12 | |
| 500 Errors on GitLab-org Repository | Minor | 46 min | resolved | 03-24 | |
| Rate Limit Errors on Claude models | Minor | 12 h | resolved | 03-31 |
CVEs published
- CVE-2026-3848 Improper Neutralization of CRLF Sequences ('CRLF Injection') in GitLab (CVSS 5.0)
- CVE-2026-1732 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab (CVSS 4.3)
- CVE-2026-1663 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-1230 Use of Incorrectly-Resolved Name or Reference in GitLab (CVSS 4.1)
- CVE-2026-1090 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2026-1069 Uncontrolled Recursion in GitLab (CVSS 7.5)
- CVE-2026-0602 Authentication Bypass Using an Alternate Path or Channel in GitLab (CVSS 4.3)
- CVE-2025-14513 Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5)
- CVE-2025-13929 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2025-13690 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-12704 Missing Authorization in GitLab (CVSS 3.5)
- CVE-2025-12697 Improper Encoding or Escaping of Output in GitLab (CVSS 2.2)
- CVE-2025-12576 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-12555 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-1182 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab (CVSS 4.3)
- CVE-2026-4363 Incorrect Authorization in GitLab (CVSS 3.7)
- CVE-2026-3988 Inefficient Algorithmic Complexity in GitLab (CVSS 7.5)
- CVE-2026-3857 Cross-Site Request Forgery (CSRF) in GitLab (CVSS 8.1)
- CVE-2026-2995 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab (CVSS 7.7)
- CVE-2026-2973 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 5.4)
- CVE-2026-2726 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-2745 Authentication Bypass Using an Alternate Path or Channel in GitLab (CVSS 6.8)
- CVE-2026-1724 Missing Authentication for Critical Function in GitLab (CVSS 6.8)
- CVE-2025-14595 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2025-13436 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-13078 Improper Validation of Specified Quantity in Input in GitLab (CVSS 6.5)
- CVE-2026-2370 Improper Handling of Parameters in GitLab (CVSS 8.1)
Cite this
GitLab posted 20 status incidents in March 2026 (16 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in March 2026
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2026/03