# GitLab in July 2026: incidents, uptime and changes

> GitLab in July 2026: 7 incidents on its status page (2 major or critical), 99.53% free of major or critical incidents (vendor-reported), 20 CVEs. From Rewindex’s archive of GitLab’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/gitlab/2026/07
Last updated: 2026-10-25T17:10:00Z

- Incidents posted: 7 (major/critical: 2) · Maintenance: 0
- By vendor impact label: major 2, minor 5
- Uptime (vendor-reported): 99.53% free of major/critical incidents, 91.28% free of any incident; outage time 3 h 26 min, incident time 2.7 days
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 20
- Previous month: [June 2026](https://rewindex.com/company/gitlab/2026/06.md) · Next: [August 2026](https://rewindex.com/company/gitlab/2026/08.md) · [All months](https://rewindex.com/company/gitlab/reports.md) · [GitLab](https://rewindex.com/company/gitlab.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Elevated Errors Affecting AI Gateway Health Checks](https://rewindex.com/company/gitlab/incidents/6a56bc6e739a5205aaf5c15e.md) | major | 2026-07-14 22:47 UTC | 2026-07-15 00:47 UTC | 2.0 h | resolved |
| [Elevated Errors Affecting GitLab Duo Custom Agents](https://rewindex.com/company/gitlab/incidents/6a5a53f5ef562304dbf2a393.md) | major | 2026-07-17 16:10 UTC | 2026-07-17 17:36 UTC | 1.4 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [CI pipelines stuck in pending state](https://rewindex.com/company/gitlab/incidents/6a4512c18614df05b0373725.md) | minor | 2026-07-01 13:14 UTC | 2026-07-01 14:04 UTC | 50 min | resolved |
| [Issues deleting new MR approval rules](https://rewindex.com/company/gitlab/incidents/6a4d3bb2768fe205bd42faf8.md) | minor | 2026-07-07 17:47 UTC | 2026-07-08 15:59 UTC | 22 h | resolved |
| [Elevated Errors Affecting AI Gateway Health Checks](https://rewindex.com/company/gitlab/incidents/6a56bc6e739a5205aaf5c15e.md) | major | 2026-07-14 22:47 UTC | 2026-07-15 00:47 UTC | 2.0 h | resolved |
| [Degraded performance affecting package pulls from registry(packages.gitlab.com)](https://rewindex.com/company/gitlab/incidents/6a57953a125ab6060411c417.md) | minor | 2026-07-15 14:12 UTC | 2026-07-15 21:29 UTC | 7.3 h | resolved |
| [Elevated Errors Affecting GitLab Duo Custom Agents](https://rewindex.com/company/gitlab/incidents/6a5a53f5ef562304dbf2a393.md) | major | 2026-07-17 16:10 UTC | 2026-07-17 17:36 UTC | 1.4 h | resolved |
| [Possible Issues Signing into GitLab.com](https://rewindex.com/company/gitlab/incidents/6a613a766c10cf04f78fbf82.md) | minor | 2026-07-22 21:47 UTC | 2026-07-24 03:50 UTC | 30 h | resolved |
| [Elevated error rates on GitLab.com](https://rewindex.com/company/gitlab/incidents/6a67baf90a60e504d8584d5d.md) | minor | 2026-07-27 20:09 UTC | 2026-07-27 21:11 UTC | 1.0 h | resolved |

## CVEs published

- [CVE-2026-13320](https://rewindex.com/cve/CVE-2026-13320.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.3), published 2026-07-08
- [CVE-2026-11827](https://rewindex.com/cve/CVE-2026-11827.md) Insufficiently Protected Credentials in GitLab (CVSS 4.9), published 2026-07-08
- [CVE-2026-8472](https://rewindex.com/cve/CVE-2026-8472.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-07-08
- [CVE-2026-7492](https://rewindex.com/cve/CVE-2026-7492.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-07-08
- [CVE-2026-6896](https://rewindex.com/cve/CVE-2026-6896.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2026-07-08
- [CVE-2026-6352](https://rewindex.com/cve/CVE-2026-6352.md) Incorrect Authorization in GitLab (CVSS 2.7), published 2026-07-08
- [CVE-2025-12506](https://rewindex.com/cve/CVE-2025-12506.md) Use of Incorrectly-Resolved Name or Reference in GitLab (CVSS 3.5), published 2026-07-08
- [CVE-2026-16553](https://rewindex.com/cve/CVE-2026-16553.md) Insufficiently Protected Credentials in GitLab (CVSS 5.4), published 2026-07-29
- [CVE-2026-15975](https://rewindex.com/cve/CVE-2026-15975.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5), published 2026-07-29
- [CVE-2026-15831](https://rewindex.com/cve/CVE-2026-15831.md) Generation of Incorrect Security Tokens in GitLab (CVSS 4.3), published 2026-07-29
- [CVE-2026-15077](https://rewindex.com/cve/CVE-2026-15077.md) Improper Neutralization of Input Used for LLM Prompting in GitLab (CVSS 4.3), published 2026-07-29
- [CVE-2026-14351](https://rewindex.com/cve/CVE-2026-14351.md) Exposure of Sensitive Information Through Metadata in GitLab (CVSS 4.3), published 2026-07-29
- [CVE-2026-14341](https://rewindex.com/cve/CVE-2026-14341.md) Missing Authorization in GitLab (CVSS 4.9), published 2026-07-29
- [CVE-2026-13113](https://rewindex.com/cve/CVE-2026-13113.md) Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab (CVSS 6.5), published 2026-07-29
- [CVE-2026-12436](https://rewindex.com/cve/CVE-2026-12436.md) Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab (CVSS 8.4), published 2026-07-29
- [CVE-2026-6336](https://rewindex.com/cve/CVE-2026-6336.md) Incorrect Authorization in GitLab (CVSS 5.3), published 2026-07-29
- [CVE-2026-6267](https://rewindex.com/cve/CVE-2026-6267.md) Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 8.5), published 2026-07-29
- [CVE-2026-4672](https://rewindex.com/cve/CVE-2026-4672.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-07-29
- [CVE-2026-3093](https://rewindex.com/cve/CVE-2026-3093.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 4.7), published 2026-07-29
- [CVE-2025-14562](https://rewindex.com/cve/CVE-2025-14562.md) Incorrect Authorization in GitLab (CVSS 3.1), published 2026-07-29

## Cite this

GitLab posted 7 status incidents in July 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/gitlab/2026/07
- Citation: GitLab, “GitLab in July 2026” (2026-07-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/gitlab/2026/07 (CC BY 4.0).
- Markdown link: `[GitLab: GitLab in July 2026 (2026-07-01)](https://rewindex.com/company/gitlab/2026/07)`


---
Canonical: https://rewindex.com/company/gitlab/2026/07 · Markdown: https://rewindex.com/company/gitlab/2026/07.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T13:33:15.653Z