CompaniesGitLabMonthly reportsApril 2026
GitLab in April 2026: incidents, uptime and changes
10incidents posted
2labelled major or critical
97.91%free of major/critical
93.79%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 15 h 2 min, incident time 44 h 40 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 2 · Minor 7 · No impact listed 1
Major and critical incidents 2
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Login failures when using email-based 2FA on GitLab.com | Major | 12 h | resolved | 04-01 | |
| Failures when GitLab Runners pull container image | Major | 2.7 h | resolved | 04-14 |
Other incidents 8
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Intermittent Git and CI/CD pipeline failures | Minor | 12 h | resolved | 04-01 | |
| Degraded GitLab Duo Performance | Minor | 11 h | resolved | 04-08 | |
| GitLab.com Service Degradation | Minor | 1.6 h | resolved | 04-08 | |
| CI pipelines processing delays | Minor | 2.0 h | resolved | 04-20 | |
| Increased error rates for web services | No impact listed | 5 min | resolved | 04-23 | |
| Degraded performance affecting Duo features | Minor | 4.6 h | resolved | 04-23 | |
| parsing error in the vulnerability reports | Minor | 2.2 h | resolved | 04-28 | |
| Small GitLab Hosted Runners | Minor | 1.1 h | resolved | 04-30 |
CVEs published
- CVE-2026-5173 Exposed Dangerous Method or Function in GitLab (CVSS 8.5)
- CVE-2026-4916 Missing Authorization in GitLab (CVSS 2.7)
- CVE-2026-4332 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 5.4)
- CVE-2026-2619 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-2104 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3)
- CVE-2026-1752 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-1516 Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 5.7)
- CVE-2026-1101 Improper Validation of Specified Quantity in Input in GitLab (CVSS 6.5)
- CVE-2026-1092 Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5)
- CVE-2025-12664 Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5)
- CVE-2025-9484 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-6515 Insufficient Session Expiration in GitLab (CVSS 5.4)
- CVE-2026-5816 Improper Resolution of Path Equivalence in GitLab (CVSS 8.0)
- CVE-2026-5377 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-5262 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.0)
- CVE-2026-1660 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-9957 Incorrect Authorization in GitLab (CVSS 2.7)
- CVE-2025-6016 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-3922 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2025-0186 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-4922 Cross-Site Request Forgery (CSRF) in GitLab (CVSS 8.1)
- CVE-2026-3254 Improper Restriction of Rendered UI Layers or Frames in GitLab (CVSS 3.5)
Cite this
GitLab posted 10 status incidents in April 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in April 2026
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2026/04