CompaniesGitLabMonthly reportsMay 2026
GitLab in May 2026: incidents, uptime and changes
13incidents posted
10labelled major or critical
96.54%free of major/critical
82.26%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 25 h 43 min, incident time 5.5 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 2 · Major 8 · Minor 3
Major and critical incidents 10
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| GitLab Duo "Quota exceeded" Errors | Critical | 1.6 h | resolved | 05-26 | |
| Issues with GitLab Duo in merge requests | Critical | 11 h | resolved | 05-29 | |
| Intermittent errors observed on GitLab Next | Major | 1.8 h | resolved | 05-06 | |
| 500 errors accessing repositories | Major | 2.6 h | resolved | 05-11 | |
| Elevated 5xx Errors on GitLab.com | Major | 29 min | resolved | 05-12 | |
| Degraded performance affecting Duo features | Major | 2.6 h | resolved | 05-15 | |
| Jobs not being picked up/stuck pending | Major | 1.6 h | resolved | 05-18 | |
| Elevated error ratio for web service | Major | 47 min | resolved | 05-21 | |
| Delays in CI job processing by runners | Major | 1.1 h | resolved | 05-26 | |
| Git operation failed | Major | 2.4 h | resolved | 05-27 |
Other incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Background processing delays | Minor | 4 d | resolved | 05-07 | |
| Elevated error rates on GitLab.com | Minor | 3.5 h | resolved | 05-12 | |
| Slowed pipelines and CI/CD Jobs | Minor | 1.2 h | resolved | 05-13 |
CVEs published
- CVE-2026-2710 (not scored)
- CVE-2026-8144 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-8280 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-7481 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2026-7471 Server-Side Request Forgery (SSRF) in GitLab (CVSS 3.5)
- CVE-2026-7377 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2026-6883 Missing Authorization in GitLab (CVSS 2.6)
- CVE-2026-6335 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 5.4)
- CVE-2026-6073 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2026-6063 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3)
- CVE-2026-4527 Cross-Site Request Forgery (CSRF) in GitLab (CVSS 6.5)
- CVE-2026-4524 Authentication Bypass Using an Alternate Path or Channel in GitLab (CVSS 6.5)
- CVE-2026-3607 Access Control Check Implemented After Asset is Accessed in GitLab (CVSS 4.3)
- CVE-2026-3160 Unintended Proxy or Intermediary ('Confused Deputy') in GitLab (CVSS 5.8)
- CVE-2026-3074 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3)
- CVE-2026-3073 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3)
- CVE-2026-2900 Missing Authorization in GitLab (CVSS 2.7)
- CVE-2026-1659 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2026-1338 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3)
- CVE-2026-1322 Business Logic Errors in GitLab (CVSS 6.8)
- CVE-2026-1184 Deserialization of Untrusted Data in GitLab (CVSS 6.5)
- CVE-2025-14870 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2025-14869 Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5)
- CVE-2025-13874 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3)
- CVE-2025-12669 Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 5.4)
- CVE-2026-5297 (not scored)
- CVE-2026-8716 Use of Incorrectly-Resolved Name or Reference in GitLab (CVSS 4.3)
- CVE-2026-6713 Incorrect Authorization in GitLab (CVSS 5.3)
- CVE-2026-5296 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-4868 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 8.2)
- CVE-2026-2601 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-1402 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-9807 Incorrect Authorization in GitLab (CVSS 4.3)
Cite this
GitLab posted 13 status incidents in May 2026 (10 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in May 2026
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2026/05