# GitLab in May 2026: incidents, uptime and changes > GitLab in May 2026: 13 incidents on its status page (10 major or critical), 96.54% free of major or critical incidents (vendor-reported), 33 CVEs. From Rewindex’s archive of GitLab’s status, pricing and policy pages. Canonical: https://rewindex.com/company/gitlab/2026/05 Last updated: 2026-10-16T14:10:00Z - Incidents posted: 13 (major/critical: 10) · Maintenance: 0 - By vendor impact label: critical 2, major 8, minor 3 - Uptime (vendor-reported): 96.54% free of major/critical incidents, 82.26% free of any incident; outage time 25 h 43 min, incident time 5.5 days - Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 33 - Previous month: [April 2026](https://rewindex.com/company/gitlab/2026/04.md) · Next: [June 2026](https://rewindex.com/company/gitlab/2026/06.md) · [All months](https://rewindex.com/company/gitlab/reports.md) · [GitLab](https://rewindex.com/company/gitlab.md) _Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._ ## Major and critical incidents | Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status | | --- | --- | --- | --- | --- | --- | | [GitLab Duo "Quota exceeded" Errors](https://rewindex.com/company/gitlab/incidents/6a15972fa6a521058e188d7a.md) | critical | 2026-05-26 12:50 UTC | 2026-05-26 14:25 UTC | 1.6 h | resolved | | [Issues with GitLab Duo in merge requests](https://rewindex.com/company/gitlab/incidents/6a198b7a50c7630597c4d950.md) | critical | 2026-05-29 12:50 UTC | 2026-05-29 23:41 UTC | 11 h | resolved | | [Intermittent errors observed on GitLab Next](https://rewindex.com/company/gitlab/incidents/69fb90118e58bf058c143589.md) | major | 2026-05-06 19:01 UTC | 2026-05-06 20:46 UTC | 1.8 h | resolved | | [500 errors accessing repositories](https://rewindex.com/company/gitlab/incidents/6a019654c45d27050d60be2d.md) | major | 2026-05-11 08:41 UTC | 2026-05-11 11:16 UTC | 2.6 h | resolved | | [Elevated 5xx Errors on GitLab.com](https://rewindex.com/company/gitlab/incidents/6a0395f91cc37505204a4a97.md) | major | 2026-05-12 21:04 UTC | 2026-05-12 21:33 UTC | 29 min | resolved | | [Degraded performance affecting Duo features](https://rewindex.com/company/gitlab/incidents/6a073db1f120e805ff42a198.md) | major | 2026-05-15 15:37 UTC | 2026-05-15 18:11 UTC | 2.6 h | resolved | | [Jobs not being picked up/stuck pending](https://rewindex.com/company/gitlab/incidents/6a0af1eaa9397105e83f87ae.md) | major | 2026-05-18 11:03 UTC | 2026-05-18 12:41 UTC | 1.6 h | resolved | | [Elevated error ratio for web service](https://rewindex.com/company/gitlab/incidents/6a0ed3700c9a320585c83ff7.md) | major | 2026-05-21 09:42 UTC | 2026-05-21 10:29 UTC | 47 min | resolved | | [Delays in CI job processing by runners](https://rewindex.com/company/gitlab/incidents/6a15c772eac9dc05ffa1f2bb.md) | major | 2026-05-26 16:16 UTC | 2026-05-26 17:21 UTC | 1.1 h | resolved | | [Git operation failed](https://rewindex.com/company/gitlab/incidents/6a169dbf50c7630597c4d7ff.md) | major | 2026-05-27 07:31 UTC | 2026-05-27 09:55 UTC | 2.4 h | resolved | ## All incidents | Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status | | --- | --- | --- | --- | --- | --- | | [Intermittent errors observed on GitLab Next](https://rewindex.com/company/gitlab/incidents/69fb90118e58bf058c143589.md) | major | 2026-05-06 19:01 UTC | 2026-05-06 20:46 UTC | 1.8 h | resolved | | [Background processing delays](https://rewindex.com/company/gitlab/incidents/69fcb37b6817a2052ae8b2fb.md) | minor | 2026-05-07 15:44 UTC | 2026-05-11 23:56 UTC | 4 d | resolved | | [500 errors accessing repositories](https://rewindex.com/company/gitlab/incidents/6a019654c45d27050d60be2d.md) | major | 2026-05-11 08:41 UTC | 2026-05-11 11:16 UTC | 2.6 h | resolved | | [Elevated error rates on GitLab.com](https://rewindex.com/company/gitlab/incidents/6a03655054fd6005141db614.md) | minor | 2026-05-12 17:37 UTC | 2026-05-12 21:08 UTC | 3.5 h | resolved | | [Elevated 5xx Errors on GitLab.com](https://rewindex.com/company/gitlab/incidents/6a0395f91cc37505204a4a97.md) | major | 2026-05-12 21:04 UTC | 2026-05-12 21:33 UTC | 29 min | resolved | | [Slowed pipelines and CI/CD Jobs](https://rewindex.com/company/gitlab/incidents/6a04a57bbe2d5a050737745f.md) | minor | 2026-05-13 16:23 UTC | 2026-05-13 17:33 UTC | 1.2 h | resolved | | [Degraded performance affecting Duo features](https://rewindex.com/company/gitlab/incidents/6a073db1f120e805ff42a198.md) | major | 2026-05-15 15:37 UTC | 2026-05-15 18:11 UTC | 2.6 h | resolved | | [Jobs not being picked up/stuck pending](https://rewindex.com/company/gitlab/incidents/6a0af1eaa9397105e83f87ae.md) | major | 2026-05-18 11:03 UTC | 2026-05-18 12:41 UTC | 1.6 h | resolved | | [Elevated error ratio for web service](https://rewindex.com/company/gitlab/incidents/6a0ed3700c9a320585c83ff7.md) | major | 2026-05-21 09:42 UTC | 2026-05-21 10:29 UTC | 47 min | resolved | | [GitLab Duo "Quota exceeded" Errors](https://rewindex.com/company/gitlab/incidents/6a15972fa6a521058e188d7a.md) | critical | 2026-05-26 12:50 UTC | 2026-05-26 14:25 UTC | 1.6 h | resolved | | [Delays in CI job processing by runners](https://rewindex.com/company/gitlab/incidents/6a15c772eac9dc05ffa1f2bb.md) | major | 2026-05-26 16:16 UTC | 2026-05-26 17:21 UTC | 1.1 h | resolved | | [Git operation failed](https://rewindex.com/company/gitlab/incidents/6a169dbf50c7630597c4d7ff.md) | major | 2026-05-27 07:31 UTC | 2026-05-27 09:55 UTC | 2.4 h | resolved | | [Issues with GitLab Duo in merge requests](https://rewindex.com/company/gitlab/incidents/6a198b7a50c7630597c4d950.md) | critical | 2026-05-29 12:50 UTC | 2026-05-29 23:41 UTC | 11 h | resolved | ## CVEs published - [CVE-2026-2710](https://rewindex.com/cve/CVE-2026-2710.md) (not scored), published 2026-05-07 - [CVE-2026-8144](https://rewindex.com/cve/CVE-2026-8144.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-05-14 - [CVE-2026-8280](https://rewindex.com/cve/CVE-2026-8280.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2026-05-14 - [CVE-2026-7481](https://rewindex.com/cve/CVE-2026-7481.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2026-05-14 - [CVE-2026-7471](https://rewindex.com/cve/CVE-2026-7471.md) Server-Side Request Forgery (SSRF) in GitLab (CVSS 3.5), published 2026-05-14 - [CVE-2026-7377](https://rewindex.com/cve/CVE-2026-7377.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2026-05-14 - [CVE-2026-6883](https://rewindex.com/cve/CVE-2026-6883.md) Missing Authorization in GitLab (CVSS 2.6), published 2026-05-14 - [CVE-2026-6335](https://rewindex.com/cve/CVE-2026-6335.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 5.4), published 2026-05-14 - [CVE-2026-6073](https://rewindex.com/cve/CVE-2026-6073.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2026-05-14 - [CVE-2026-6063](https://rewindex.com/cve/CVE-2026-6063.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3), published 2026-05-14 - [CVE-2026-4527](https://rewindex.com/cve/CVE-2026-4527.md) Cross-Site Request Forgery (CSRF) in GitLab (CVSS 6.5), published 2026-05-14 - [CVE-2026-4524](https://rewindex.com/cve/CVE-2026-4524.md) Authentication Bypass Using an Alternate Path or Channel in GitLab (CVSS 6.5), published 2026-05-14 - [CVE-2026-3607](https://rewindex.com/cve/CVE-2026-3607.md) Access Control Check Implemented After Asset is Accessed in GitLab (CVSS 4.3), published 2026-05-14 - [CVE-2026-3160](https://rewindex.com/cve/CVE-2026-3160.md) Unintended Proxy or Intermediary ('Confused Deputy') in GitLab (CVSS 5.8), published 2026-05-14 - [CVE-2026-3074](https://rewindex.com/cve/CVE-2026-3074.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3), published 2026-05-14 - [CVE-2026-3073](https://rewindex.com/cve/CVE-2026-3073.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3), published 2026-05-14 - [CVE-2026-2900](https://rewindex.com/cve/CVE-2026-2900.md) Missing Authorization in GitLab (CVSS 2.7), published 2026-05-14 - [CVE-2026-1659](https://rewindex.com/cve/CVE-2026-1659.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5), published 2026-05-14 - [CVE-2026-1338](https://rewindex.com/cve/CVE-2026-1338.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3), published 2026-05-14 - [CVE-2026-1322](https://rewindex.com/cve/CVE-2026-1322.md) Business Logic Errors in GitLab (CVSS 6.8), published 2026-05-14 - [CVE-2026-1184](https://rewindex.com/cve/CVE-2026-1184.md) Deserialization of Untrusted Data in GitLab (CVSS 6.5), published 2026-05-14 - [CVE-2025-14870](https://rewindex.com/cve/CVE-2025-14870.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5), published 2026-05-14 - [CVE-2025-14869](https://rewindex.com/cve/CVE-2025-14869.md) Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5), published 2026-05-14 - [CVE-2025-13874](https://rewindex.com/cve/CVE-2025-13874.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3), published 2026-05-14 - [CVE-2025-12669](https://rewindex.com/cve/CVE-2025-12669.md) Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 5.4), published 2026-05-14 - [CVE-2026-5297](https://rewindex.com/cve/CVE-2026-5297.md) (not scored), published 2026-05-21 - [CVE-2026-8716](https://rewindex.com/cve/CVE-2026-8716.md) Use of Incorrectly-Resolved Name or Reference in GitLab (CVSS 4.3), published 2026-05-27 - [CVE-2026-6713](https://rewindex.com/cve/CVE-2026-6713.md) Incorrect Authorization in GitLab (CVSS 5.3), published 2026-05-27 - [CVE-2026-5296](https://rewindex.com/cve/CVE-2026-5296.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-05-27 - [CVE-2026-4868](https://rewindex.com/cve/CVE-2026-4868.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 8.2), published 2026-05-27 - [CVE-2026-2601](https://rewindex.com/cve/CVE-2026-2601.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-05-27 - [CVE-2026-1402](https://rewindex.com/cve/CVE-2026-1402.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2026-05-27 - [CVE-2026-9807](https://rewindex.com/cve/CVE-2026-9807.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2026-05-28 ## Cite this GitLab posted 13 status incidents in May 2026 (10 major or critical); 0 price changes and 0 notable page changes observed. - Canonical URL: https://rewindex.com/company/gitlab/2026/05 - Citation: GitLab, “GitLab in May 2026” (2026-05-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/gitlab/2026/05 (CC BY 4.0). - Markdown link: `[GitLab: GitLab in May 2026 (2026-05-01)](https://rewindex.com/company/gitlab/2026/05)` --- Canonical: https://rewindex.com/company/gitlab/2026/05 · Markdown: https://rewindex.com/company/gitlab/2026/05.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T15:34:00.357Z