CompaniesGitLabMonthly reportsJuly 2026
GitLab in July 2026: incidents, uptime and changes
7incidents posted
2labelled major or critical
99.53%free of major/critical
91.28%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 3 h 26 min, incident time 2.7 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 2 · Minor 5
Major and critical incidents 2
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Elevated Errors Affecting AI Gateway Health Checks | Major | 2.0 h | resolved | 07-14 | |
| Elevated Errors Affecting GitLab Duo Custom Agents | Major | 1.4 h | resolved | 07-17 |
Other incidents 5
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| CI pipelines stuck in pending state | Minor | 50 min | resolved | 07-01 | |
| Issues deleting new MR approval rules | Minor | 22 h | resolved | 07-07 | |
| Degraded performance affecting package pulls from registry(packages.gitlab.com) | Minor | 7.3 h | resolved | 07-15 | |
| Possible Issues Signing into GitLab.com | Minor | 30 h | resolved | 07-22 | |
| Elevated error rates on GitLab.com | Minor | 1.0 h | resolved | 07-27 |
CVEs published
- CVE-2026-13320 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.3)
- CVE-2026-11827 Insufficiently Protected Credentials in GitLab (CVSS 4.9)
- CVE-2026-8472 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-7492 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-6896 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2026-6352 Incorrect Authorization in GitLab (CVSS 2.7)
- CVE-2025-12506 Use of Incorrectly-Resolved Name or Reference in GitLab (CVSS 3.5)
- CVE-2026-16553 Insufficiently Protected Credentials in GitLab (CVSS 5.4)
- CVE-2026-15975 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2026-15831 Generation of Incorrect Security Tokens in GitLab (CVSS 4.3)
- CVE-2026-15077 Improper Neutralization of Input Used for LLM Prompting in GitLab (CVSS 4.3)
- CVE-2026-14351 Exposure of Sensitive Information Through Metadata in GitLab (CVSS 4.3)
- CVE-2026-14341 Missing Authorization in GitLab (CVSS 4.9)
- CVE-2026-13113 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab (CVSS 6.5)
- CVE-2026-12436 Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab (CVSS 8.4)
- CVE-2026-6336 Incorrect Authorization in GitLab (CVSS 5.3)
- CVE-2026-6267 Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 8.5)
- CVE-2026-4672 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-3093 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 4.7)
- CVE-2025-14562 Incorrect Authorization in GitLab (CVSS 3.1)
Cite this
GitLab posted 7 status incidents in July 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in July 2026
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2026/07