CompaniesGitLabMonthly reportsOctober 2026
GitLab in October 2026: incidents, uptime and changes
16incidents posted
11labelled major or critical
83.37%free of major/critical
79.85%free of any incident
0price changes
1notable page changes
Vendor-reported outage time 5.2 days, incident time 6.2 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 4 · Major 7 · Minor 5
Major and critical incidents 11
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Increase of HTTP 50X errors on GitLab.com | Critical | 41 h | resolved | 10-13 | |
| Error loading GitLab.com and customers.gitlab.com | Critical | 4.3 h | resolved | 10-15 | |
| 503s on GitLab.com | Critical | 1.2 h | resolved | 10-16 | |
| 404s on customers.gitlab.com | Critical | 3.4 h | resolved | 10-20 | |
| Delayed email delivery for some email service providers | Major | 12 h | resolved | 10-01 | |
| Job delays on saas-linux-small-amd64 hosted runners | Major | 3.3 h | resolved | 10-01 | |
| Delayed job completion | Major | 2.6 h | resolved | 10-08 | |
| Errors and slow performance on merge requests in the specific groups. | Major | 2 d | resolved | 10-10 | |
| GitLab.com CI/CD pipelines delayed or not starting | Major | 4.0 h | resolved | 10-14 | |
| Intermittent 500 on GitLab.com | Major | 2.8 h | resolved | 10-20 | |
| General slowness on Gitlab.com | Major | 32 min | resolved | 10-23 |
Other incidents 5
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Job delays on saas-linux-small-amd64 hosted runners | Minor | 1.2 h | resolved | 10-07 | |
| GitLab Duo Workflow Issues | Minor | 38 h | resolved | 10-12 | |
| Job delays on saas-linux-small-amd64 hosted runners | Minor | 6.5 h | resolved | 10-13 | |
| CI/CD Job Delays on GitLab.com | Minor | 3.5 h | resolved | 10-15 | |
| GitLab.com CI/CD Incident | Minor | 1.8 h | resolved | 10-16 |
Pricing, legal and trust page changes
- Trust page changed Trust / securityTrust page
CVEs published
- CVE-2026-90970 Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway (CVSS 9.9)
- CVE-2026-1403 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5)
- CVE-2026-105458 Reliance on Untrusted Inputs in a Security Decision in GitLab (CVSS 4.3)
- CVE-2026-104661 Incorrect Privilege Assignment in GitLab (CVSS 4.3)
- CVE-2026-103549 Incorrect Authorization in GitLab (CVSS 2.7)
- CVE-2026-101168 Insertion of Sensitive Information into Log File in GitLab (CVSS 6.2)
- CVE-2026-100755 Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab (CVSS 4.6)
- CVE-2026-100104 Server-Side Request Forgery (SSRF) in GitLab (CVSS 3.5)
- CVE-2026-96893 Improper Neutralization of Input Used for LLM Prompting in GitLab (CVSS 7.3)
- CVE-2026-97229 Integer Overflow or Wraparound in GitLab (CVSS 10.0, CISA KEV)
- CVE-2026-92883 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2026-92528 Incorrect Authorization in GitLab (CVSS 4.2)
- CVE-2026-85529 Incorrect Authorization in GitLab (CVSS 5.3)
- CVE-2026-84284 Incorrect Authorization in GitLab (CVSS 5.3)
- CVE-2026-82632 Incorrect Authorization in GitLab (CVSS 3.1)
- CVE-2026-81839 Incorrect Authorization in GitLab (CVSS 7.7)
- CVE-2026-78335 Incorrect Authorization in GitLab (CVSS 4.2)
- CVE-2026-16301 Incorrect Authorization in GitLab (CVSS 8.5)
- CVE-2026-16275 Incorrect Authorization in GitLab (CVSS 5.3)
- CVE-2026-14814 Permissive Regular Expression in GitLab (CVSS 8.2)
- CVE-2026-14552 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-14210 Insufficient Granularity of Access Control in GitLab (CVSS 4.3)
- CVE-2026-9268 Incorrect Authorization in GitLab (CVSS 2.7)
- CVE-2026-7767 URL Redirection to Untrusted Site ('Open Redirect') in GitLab (CVSS 5.8)
- CVE-2026-6567 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-5954 Incorrect Authorization in GitLab (CVSS 4.2)
- CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 (CVSS 6.8)
- CVE-2026-112326 Improper Cleanup on Thrown Exception in GitLab (CVSS 3.1)
- CVE-2026-112212 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab (CVSS 7.5)
- CVE-2026-112378 Use of Less Trusted Source in GitLab (CVSS 4.3)
- CVE-2026-105777 Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 4.3)
- CVE-2026-105711 Use of Cache Containing Sensitive Information in GitLab (CVSS 3.5)
- CVE-2026-103515 Incorrect Authorization in GitLab (CVSS 2.7)
- CVE-2026-16255 Incorrect Authorization in GitLab (CVSS 5.9)
- CVE-2026-15723 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab (CVSS 8.2)
- CVE-2026-14288 Use of Incorrectly-Resolved Name or Reference in GitLab (CVSS 3.1)
- CVE-2026-13319 Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3)
- CVE-2026-12664 Incorrect Authorization in GitLab (CVSS 6.8)
- CVE-2026-110264 Integer Overflow or Wraparound in GitLab (CVSS 10.0)
Maintenance 1
Show scheduled maintenance
Cite this
GitLab posted 16 status incidents in October 2026 (11 major or critical); 0 price changes and 1 notable page change observed.
- Title
- GitLab in October 2026
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2026/10