# GitLab in April 2026: incidents, uptime and changes

> GitLab in April 2026: 10 incidents on its status page (2 major or critical), 97.91% free of major or critical incidents (vendor-reported), 22 CVEs. From Rewindex’s archive of GitLab’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/gitlab/2026/04
Last updated: 2026-10-14T13:10:00Z

- Incidents posted: 10 (major/critical: 2) · Maintenance: 0
- By vendor impact label: major 2, minor 7, none 1
- Uptime (vendor-reported): 97.91% free of major/critical incidents, 93.79% free of any incident; outage time 15 h 2 min, incident time 44 h 40 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 22
- Previous month: [March 2026](https://rewindex.com/company/gitlab/2026/03.md) · Next: [May 2026](https://rewindex.com/company/gitlab/2026/05.md) · [All months](https://rewindex.com/company/gitlab/reports.md) · [GitLab](https://rewindex.com/company/gitlab.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Login failures when using email-based 2FA on GitLab.com](https://rewindex.com/company/gitlab/incidents/69ccc6baf8ac3b10d21a920d.md) | major | 2026-04-01 07:18 UTC | 2026-04-01 19:38 UTC | 12 h | resolved |
| [Failures when GitLab Runners pull container image](https://rewindex.com/company/gitlab/incidents/69ddcf3f75cad505fa6eed55.md) | major | 2026-04-14 05:23 UTC | 2026-04-14 08:05 UTC | 2.7 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Login failures when using email-based 2FA on GitLab.com](https://rewindex.com/company/gitlab/incidents/69ccc6baf8ac3b10d21a920d.md) | major | 2026-04-01 07:18 UTC | 2026-04-01 19:38 UTC | 12 h | resolved |
| [Intermittent Git and CI/CD pipeline failures](https://rewindex.com/company/gitlab/incidents/69cd41555bad68057cb74323.md) | minor | 2026-04-01 16:01 UTC | 2026-04-02 03:50 UTC | 12 h | resolved |
| [Degraded GitLab Duo Performance](https://rewindex.com/company/gitlab/incidents/69d5fd239cd38810be1058dc.md) | minor | 2026-04-08 07:00 UTC | 2026-04-08 18:28 UTC | 11 h | resolved |
| [GitLab.com Service Degradation](https://rewindex.com/company/gitlab/incidents/69d66a453bf81a058326966d.md) | minor | 2026-04-08 14:46 UTC | 2026-04-08 16:20 UTC | 1.6 h | resolved |
| [Failures when GitLab Runners pull container image](https://rewindex.com/company/gitlab/incidents/69ddcf3f75cad505fa6eed55.md) | major | 2026-04-14 05:23 UTC | 2026-04-14 08:05 UTC | 2.7 h | resolved |
| [CI pipelines processing delays](https://rewindex.com/company/gitlab/incidents/69e6494e3fb5a505ae2d873d.md) | minor | 2026-04-20 15:42 UTC | 2026-04-20 17:41 UTC | 2.0 h | resolved |
| [Increased error rates for web services](https://rewindex.com/company/gitlab/incidents/69e99594fcdb9205f3a3711d.md) | none | 2026-04-23 03:44 UTC | 2026-04-23 03:49 UTC | 5 min | resolved |
| [Degraded performance affecting Duo features](https://rewindex.com/company/gitlab/incidents/69e9d43dfcdb9205f3a37122.md) | minor | 2026-04-23 08:11 UTC | 2026-04-23 12:49 UTC | 4.6 h | resolved |
| [parsing error in the vulnerability reports](https://rewindex.com/company/gitlab/incidents/69f0948d61990205bc04157a.md) | minor | 2026-04-28 11:05 UTC | 2026-04-28 13:17 UTC | 2.2 h | resolved |
| [Small GitLab Hosted Runners](https://rewindex.com/company/gitlab/incidents/69f37a771cc37505204a4586.md) | minor | 2026-04-30 15:51 UTC | 2026-04-30 17:00 UTC | 1.1 h | resolved |

## CVEs published

- [CVE-2026-5173](https://rewindex.com/cve/CVE-2026-5173.md) Exposed Dangerous Method or Function in GitLab (CVSS 8.5), published 2026-04-08
- [CVE-2026-4916](https://rewindex.com/cve/CVE-2026-4916.md) Missing Authorization in GitLab (CVSS 2.7), published 2026-04-08
- [CVE-2026-4332](https://rewindex.com/cve/CVE-2026-4332.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 5.4), published 2026-04-08
- [CVE-2026-2619](https://rewindex.com/cve/CVE-2026-2619.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2026-04-08
- [CVE-2026-2104](https://rewindex.com/cve/CVE-2026-2104.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3), published 2026-04-08
- [CVE-2026-1752](https://rewindex.com/cve/CVE-2026-1752.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2026-04-08
- [CVE-2026-1516](https://rewindex.com/cve/CVE-2026-1516.md) Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 5.7), published 2026-04-08
- [CVE-2026-1101](https://rewindex.com/cve/CVE-2026-1101.md) Improper Validation of Specified Quantity in Input in GitLab (CVSS 6.5), published 2026-04-08
- [CVE-2026-1092](https://rewindex.com/cve/CVE-2026-1092.md) Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5), published 2026-04-08
- [CVE-2025-12664](https://rewindex.com/cve/CVE-2025-12664.md) Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5), published 2026-04-08
- [CVE-2025-9484](https://rewindex.com/cve/CVE-2025-9484.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-04-08
- [CVE-2026-6515](https://rewindex.com/cve/CVE-2026-6515.md) Insufficient Session Expiration in GitLab (CVSS 5.4), published 2026-04-22
- [CVE-2026-5816](https://rewindex.com/cve/CVE-2026-5816.md) Improper Resolution of Path Equivalence in GitLab (CVSS 8.0), published 2026-04-22
- [CVE-2026-5377](https://rewindex.com/cve/CVE-2026-5377.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2026-04-22
- [CVE-2026-5262](https://rewindex.com/cve/CVE-2026-5262.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.0), published 2026-04-22
- [CVE-2026-1660](https://rewindex.com/cve/CVE-2026-1660.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2026-04-22
- [CVE-2025-9957](https://rewindex.com/cve/CVE-2025-9957.md) Incorrect Authorization in GitLab (CVSS 2.7), published 2026-04-22
- [CVE-2025-6016](https://rewindex.com/cve/CVE-2025-6016.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2026-04-22
- [CVE-2025-3922](https://rewindex.com/cve/CVE-2025-3922.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2026-04-22
- [CVE-2025-0186](https://rewindex.com/cve/CVE-2025-0186.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2026-04-22
- [CVE-2026-4922](https://rewindex.com/cve/CVE-2026-4922.md) Cross-Site Request Forgery (CSRF) in GitLab (CVSS 8.1), published 2026-04-22
- [CVE-2026-3254](https://rewindex.com/cve/CVE-2026-3254.md) Improper Restriction of Rendered UI Layers or Frames in GitLab (CVSS 3.5), published 2026-04-22

## Cite this

GitLab posted 10 status incidents in April 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/gitlab/2026/04
- Citation: GitLab, “GitLab in April 2026” (2026-04-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/gitlab/2026/04 (CC BY 4.0).
- Markdown link: `[GitLab: GitLab in April 2026 (2026-04-01)](https://rewindex.com/company/gitlab/2026/04)`


---
Canonical: https://rewindex.com/company/gitlab/2026/04 · Markdown: https://rewindex.com/company/gitlab/2026/04.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:56:29.663Z