CompaniesGitLabMonthly reportsJune 2026
GitLab in June 2026: incidents, uptime and changes
Vendor-reported outage time 26 h 44 min, incident time 2.2 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 1 · Major 5 · Minor 4 · No impact listed 1
Major and critical incidents 6
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Intermittent 5XX errors accessing in GitLab.com | Critical | 13 h | resolved | 06-11 | |
| Issue with processing CI jobs | Major | 1.8 h | resolved | 06-05 | |
| Credits Dashboard Disruption | Major | 4.1 h | resolved | 06-08 | |
| Errors interacting with git via SSH | Major | 2.3 h | resolved | 06-23 | |
| CI pipelines not starting on merge requests. | Major | 3.3 h | resolved | 06-30 | |
| Code Suggestions not working | Major | 2.1 h | resolved | 06-30 |
Other incidents 5
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Problem with Duo Agent Platform Flows | Minor | 3.2 h | resolved | 06-03 | |
| Duo Agent Platform Flows not working for some projects | Minor | 16 h | resolved | 06-04 | |
| Claude Fable is not available through GitLab.com | No impact listed | 4.0 h | resolved | 06-13 | |
| Elevated errors in background job processing | Minor | 2.8 h | resolved | 06-18 | |
| 500 errors, CI checkout failures and slow page loads | Minor | 3.6 h | resolved | 06-30 |
CVEs published
- CVE-2026-10733 Improper Restriction of Rendered UI Layers or Frames in GitLab (CVSS 4.3)
- CVE-2026-10087 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2026-9694 Improper Neutralization of Substitution Characters in GitLab (CVSS 2.6)
- CVE-2026-9204 Server-Side Request Forgery (SSRF) in GitLab (CVSS 5.3)
- CVE-2026-8589 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.3)
- CVE-2026-7250 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2026-6976 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 3.7)
- CVE-2026-6277 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-6269 Incorrect Authorization in GitLab (CVSS 5.4)
- CVE-2026-3553 Incorrect Authorization in GitLab (CVSS 3.1)
- CVE-2026-1500 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-12635 Reliance on Reverse DNS Resolution for a Security-Critical Action in GitLab (CVSS 0.0)
- CVE-2026-12053 Insertion of Sensitive Information into Log File in GitLab (CVSS 8.6)
- CVE-2026-11379 Incorrect Authorization in GitLab (CVSS 5.3)
- CVE-2026-10712 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.0)
- CVE-2026-8330 Insertion of Sensitive Information into Log File in GitLab (CVSS 4.4)
- CVE-2026-5952 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-5796 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-5309 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 5.4)
- CVE-2026-3176 Missing Authorization in GitLab (CVSS 3.1)
- CVE-2026-2238 Missing Authorization in GitLab (CVSS 5.3)
- CVE-2026-1606 Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 4.3)
- CVE-2026-0934 Incorrect Authorization in GitLab (CVSS 3.8)
- CVE-2026-10086 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
Cite this
GitLab posted 11 status incidents in June 2026 (6 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in June 2026
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2026/06