# GitLab in October 2026: incidents, uptime and changes

> GitLab in October 2026: 16 incidents on its status page (11 major or critical), 83.37% free of major or critical incidents (vendor-reported), 1 pricing/legal/trust page change, 39 CVEs. From Rewindex’s archive of GitLab’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/gitlab/2026/10
Last updated: 2026-11-02T13:30:16Z

- Incidents posted: 16 (major/critical: 11) · Maintenance: 1
- By vendor impact label: critical 4, major 7, minor 5
- Uptime (vendor-reported): 83.37% free of major/critical incidents, 79.85% free of any incident; outage time 5.2 days, incident time 6.2 days
- Price changes: 0 · Pricing/legal/trust page changes: 1 · Deprecations: 0 · CVEs: 39
- Previous month: [September 2026](https://rewindex.com/company/gitlab/2026/09.md) · Next: [November 2026](https://rewindex.com/company/gitlab/2026/11.md) · [All months](https://rewindex.com/company/gitlab/reports.md) · [GitLab](https://rewindex.com/company/gitlab.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Increase of HTTP 50X errors on GitLab.com](https://rewindex.com/company/gitlab/incidents/6acdd94de3aa7005ae52c614.md) | critical | 2026-10-13 07:10 UTC | 2026-10-14 23:40 UTC | 41 h | resolved |
| [Error loading GitLab.com and customers.gitlab.com](https://rewindex.com/company/gitlab/incidents/6ad059d62dc48705ab3da0cd.md) | critical | 2026-10-15 04:43 UTC | 2026-10-15 09:02 UTC | 4.3 h | resolved |
| [503s on GitLab.com](https://rewindex.com/company/gitlab/incidents/6ad24c7acb21fb05a5db963c.md) | critical | 2026-10-16 16:10 UTC | 2026-10-16 17:24 UTC | 1.2 h | resolved |
| [404s on customers.gitlab.com](https://rewindex.com/company/gitlab/incidents/6ad7e38fa8d54c04f58bf921.md) | critical | 2026-10-20 21:56 UTC | 2026-10-21 01:21 UTC | 3.4 h | resolved |
| [Delayed email delivery for some email service providers](https://rewindex.com/company/gitlab/incidents/6abdaada5d42aa059f21606c.md) | major | 2026-10-01 00:35 UTC | 2026-10-01 12:12 UTC | 12 h | resolved |
| [Job delays on saas-linux-small-amd64 hosted runners](https://rewindex.com/company/gitlab/incidents/6abea6ac2dc48705ab3d9c9e.md) | major | 2026-10-01 18:30 UTC | 2026-10-01 21:48 UTC | 3.3 h | resolved |
| [Delayed job completion](https://rewindex.com/company/gitlab/incidents/6ac7bdf4a87f56057ceec9f9.md) | major | 2026-10-08 15:59 UTC | 2026-10-08 18:33 UTC | 2.6 h | resolved |
| [Errors and slow performance on merge requests in the specific groups.](https://rewindex.com/company/gitlab/incidents/6ac9c3c12dc48705ab3d9fb9.md) | major | 2026-10-10 04:49 UTC | 2026-10-12 10:15 UTC | 2 d | resolved |
| [GitLab.com CI/CD pipelines delayed or not starting](https://rewindex.com/company/gitlab/incidents/6acf92b0cb21fb05a5db93f4.md) | major | 2026-10-14 14:33 UTC | 2026-10-14 18:30 UTC | 4.0 h | resolved |
| [Intermittent 500 on GitLab.com](https://rewindex.com/company/gitlab/incidents/6ad7137040f91004ed0e9fdf.md) | major | 2026-10-20 07:08 UTC | 2026-10-20 09:55 UTC | 2.8 h | resolved |
| [General slowness on Gitlab.com](https://rewindex.com/company/gitlab/incidents/6adb8c29934fd905c8658aae.md) | major | 2026-10-23 16:32 UTC | 2026-10-23 17:04 UTC | 32 min | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Delayed email delivery for some email service providers](https://rewindex.com/company/gitlab/incidents/6abdaada5d42aa059f21606c.md) | major | 2026-10-01 00:35 UTC | 2026-10-01 12:12 UTC | 12 h | resolved |
| [Job delays on saas-linux-small-amd64 hosted runners](https://rewindex.com/company/gitlab/incidents/6abea6ac2dc48705ab3d9c9e.md) | major | 2026-10-01 18:30 UTC | 2026-10-01 21:48 UTC | 3.3 h | resolved |
| [Job delays on saas-linux-small-amd64 hosted runners](https://rewindex.com/company/gitlab/incidents/6ac678a07b771c055e5525ac.md) | minor | 2026-10-07 16:51 UTC | 2026-10-07 18:04 UTC | 1.2 h | resolved |
| [Delayed job completion](https://rewindex.com/company/gitlab/incidents/6ac7bdf4a87f56057ceec9f9.md) | major | 2026-10-08 15:59 UTC | 2026-10-08 18:33 UTC | 2.6 h | resolved |
| [Errors and slow performance on merge requests in the specific groups.](https://rewindex.com/company/gitlab/incidents/6ac9c3c12dc48705ab3d9fb9.md) | major | 2026-10-10 04:49 UTC | 2026-10-12 10:15 UTC | 2 d | resolved |
| [GitLab Duo Workflow Issues](https://rewindex.com/company/gitlab/incidents/6accc4ce0150df057308172a.md) | minor | 2026-10-12 11:30 UTC | 2026-10-14 01:16 UTC | 38 h | resolved |
| [Increase of HTTP 50X errors on GitLab.com](https://rewindex.com/company/gitlab/incidents/6acdd94de3aa7005ae52c614.md) | critical | 2026-10-13 07:10 UTC | 2026-10-14 23:40 UTC | 41 h | resolved |
| [Job delays on saas-linux-small-amd64 hosted runners](https://rewindex.com/company/gitlab/incidents/6ace3fd15d42aa059f21643b.md) | minor | 2026-10-13 14:27 UTC | 2026-10-13 20:59 UTC | 6.5 h | resolved |
| [GitLab.com CI/CD pipelines delayed or not starting](https://rewindex.com/company/gitlab/incidents/6acf92b0cb21fb05a5db93f4.md) | major | 2026-10-14 14:33 UTC | 2026-10-14 18:30 UTC | 4.0 h | resolved |
| [Error loading GitLab.com and customers.gitlab.com](https://rewindex.com/company/gitlab/incidents/6ad059d62dc48705ab3da0cd.md) | critical | 2026-10-15 04:43 UTC | 2026-10-15 09:02 UTC | 4.3 h | resolved |
| [CI/CD Job Delays on GitLab.com](https://rewindex.com/company/gitlab/incidents/6ad0fcd144f9f6055b7aea38.md) | minor | 2026-10-15 16:19 UTC | 2026-10-15 19:50 UTC | 3.5 h | resolved |
| [GitLab.com CI/CD Incident](https://rewindex.com/company/gitlab/incidents/6ad20b862dc48705ab3da170.md) | minor | 2026-10-16 11:33 UTC | 2026-10-16 13:21 UTC | 1.8 h | resolved |
| [503s on GitLab.com](https://rewindex.com/company/gitlab/incidents/6ad24c7acb21fb05a5db963c.md) | critical | 2026-10-16 16:10 UTC | 2026-10-16 17:24 UTC | 1.2 h | resolved |
| [Intermittent 500 on GitLab.com](https://rewindex.com/company/gitlab/incidents/6ad7137040f91004ed0e9fdf.md) | major | 2026-10-20 07:08 UTC | 2026-10-20 09:55 UTC | 2.8 h | resolved |
| [404s on customers.gitlab.com](https://rewindex.com/company/gitlab/incidents/6ad7e38fa8d54c04f58bf921.md) | critical | 2026-10-20 21:56 UTC | 2026-10-21 01:21 UTC | 3.4 h | resolved |
| [General slowness on Gitlab.com](https://rewindex.com/company/gitlab/incidents/6adb8c29934fd905c8658aae.md) | major | 2026-10-23 16:32 UTC | 2026-10-23 17:04 UTC | 32 min | resolved |

## Pricing, legal and trust page changes

- 2026-10-20 09:00 UTC: [Trust page changed](https://rewindex.com/change/p2926.md) (Trust / security: Trust page)

## CVEs published

- [CVE-2026-90970](https://rewindex.com/cve/CVE-2026-90970.md) Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway (CVSS 9.9), published 2026-10-02
- [CVE-2026-1403](https://rewindex.com/cve/CVE-2026-1403.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5), published 2026-10-07
- [CVE-2026-105458](https://rewindex.com/cve/CVE-2026-105458.md) Reliance on Untrusted Inputs in a Security Decision in GitLab (CVSS 4.3), published 2026-10-13
- [CVE-2026-104661](https://rewindex.com/cve/CVE-2026-104661.md) Incorrect Privilege Assignment in GitLab (CVSS 4.3), published 2026-10-13
- [CVE-2026-103549](https://rewindex.com/cve/CVE-2026-103549.md) Incorrect Authorization in GitLab (CVSS 2.7), published 2026-10-13
- [CVE-2026-101168](https://rewindex.com/cve/CVE-2026-101168.md) Insertion of Sensitive Information into Log File in GitLab (CVSS 6.2), published 2026-10-13
- [CVE-2026-100755](https://rewindex.com/cve/CVE-2026-100755.md) Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab (CVSS 4.6), published 2026-10-13
- [CVE-2026-100104](https://rewindex.com/cve/CVE-2026-100104.md) Server-Side Request Forgery (SSRF) in GitLab (CVSS 3.5), published 2026-10-13
- [CVE-2026-96893](https://rewindex.com/cve/CVE-2026-96893.md) Improper Neutralization of Input Used for LLM Prompting in GitLab (CVSS 7.3), published 2026-10-13
- [CVE-2026-97229](https://rewindex.com/cve/CVE-2026-97229.md) Integer Overflow or Wraparound in GitLab (CVSS 10.0, CISA KEV), published 2026-10-13
- [CVE-2026-92883](https://rewindex.com/cve/CVE-2026-92883.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2026-10-13
- [CVE-2026-92528](https://rewindex.com/cve/CVE-2026-92528.md) Incorrect Authorization in GitLab (CVSS 4.2), published 2026-10-13
- [CVE-2026-85529](https://rewindex.com/cve/CVE-2026-85529.md) Incorrect Authorization in GitLab (CVSS 5.3), published 2026-10-13
- [CVE-2026-84284](https://rewindex.com/cve/CVE-2026-84284.md) Incorrect Authorization in GitLab (CVSS 5.3), published 2026-10-13
- [CVE-2026-82632](https://rewindex.com/cve/CVE-2026-82632.md) Incorrect Authorization in GitLab (CVSS 3.1), published 2026-10-13
- [CVE-2026-81839](https://rewindex.com/cve/CVE-2026-81839.md) Incorrect Authorization in GitLab (CVSS 7.7), published 2026-10-13
- [CVE-2026-78335](https://rewindex.com/cve/CVE-2026-78335.md) Incorrect Authorization in GitLab (CVSS 4.2), published 2026-10-13
- [CVE-2026-16301](https://rewindex.com/cve/CVE-2026-16301.md) Incorrect Authorization in GitLab (CVSS 8.5), published 2026-10-13
- [CVE-2026-16275](https://rewindex.com/cve/CVE-2026-16275.md) Incorrect Authorization in GitLab (CVSS 5.3), published 2026-10-13
- [CVE-2026-14814](https://rewindex.com/cve/CVE-2026-14814.md) Permissive Regular Expression in GitLab (CVSS 8.2), published 2026-10-13
- [CVE-2026-14552](https://rewindex.com/cve/CVE-2026-14552.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2026-10-13
- [CVE-2026-14210](https://rewindex.com/cve/CVE-2026-14210.md) Insufficient Granularity of Access Control in GitLab (CVSS 4.3), published 2026-10-13
- [CVE-2026-9268](https://rewindex.com/cve/CVE-2026-9268.md) Incorrect Authorization in GitLab (CVSS 2.7), published 2026-10-13
- [CVE-2026-7767](https://rewindex.com/cve/CVE-2026-7767.md) URL Redirection to Untrusted Site ('Open Redirect') in GitLab (CVSS 5.8), published 2026-10-13
- [CVE-2026-6567](https://rewindex.com/cve/CVE-2026-6567.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2026-10-13
- [CVE-2026-5954](https://rewindex.com/cve/CVE-2026-5954.md) Incorrect Authorization in GitLab (CVSS 4.2), published 2026-10-13
- [CVE-2026-111943](https://rewindex.com/cve/CVE-2026-111943.md) Distrust compromised intermediate certificates in crypto/x509 (CVSS 6.8), published 2026-10-21
- [CVE-2026-112326](https://rewindex.com/cve/CVE-2026-112326.md) Improper Cleanup on Thrown Exception in GitLab (CVSS 3.1), published 2026-10-21
- [CVE-2026-112212](https://rewindex.com/cve/CVE-2026-112212.md) Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab (CVSS 7.5), published 2026-10-21
- [CVE-2026-112378](https://rewindex.com/cve/CVE-2026-112378.md) Use of Less Trusted Source in GitLab (CVSS 4.3), published 2026-10-21
- [CVE-2026-105777](https://rewindex.com/cve/CVE-2026-105777.md) Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 4.3), published 2026-10-21
- [CVE-2026-105711](https://rewindex.com/cve/CVE-2026-105711.md) Use of Cache Containing Sensitive Information in GitLab (CVSS 3.5), published 2026-10-21
- [CVE-2026-103515](https://rewindex.com/cve/CVE-2026-103515.md) Incorrect Authorization in GitLab (CVSS 2.7), published 2026-10-21
- [CVE-2026-16255](https://rewindex.com/cve/CVE-2026-16255.md) Incorrect Authorization in GitLab (CVSS 5.9), published 2026-10-21
- [CVE-2026-15723](https://rewindex.com/cve/CVE-2026-15723.md) Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab (CVSS 8.2), published 2026-10-21
- [CVE-2026-14288](https://rewindex.com/cve/CVE-2026-14288.md) Use of Incorrectly-Resolved Name or Reference in GitLab (CVSS 3.1), published 2026-10-21
- [CVE-2026-13319](https://rewindex.com/cve/CVE-2026-13319.md) Authorization Bypass Through User-Controlled Key in GitLab (CVSS 4.3), published 2026-10-21
- [CVE-2026-12664](https://rewindex.com/cve/CVE-2026-12664.md) Incorrect Authorization in GitLab (CVSS 6.8), published 2026-10-21
- [CVE-2026-110264](https://rewindex.com/cve/CVE-2026-110264.md) Integer Overflow or Wraparound in GitLab (CVSS 10.0), published 2026-10-22

## Maintenance

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Upcoming maintenance for the Customers Portal](https://rewindex.com/company/gitlab/incidents/6ae4e0ec288fd505bb996e82.md) | maintenance | 2026-10-31 11:00 UTC | 2026-10-31 12:00 UTC | 1.0 h | completed |

## Cite this

GitLab posted 16 status incidents in October 2026 (11 major or critical); 0 price changes and 1 notable page change observed.

- Canonical URL: https://rewindex.com/company/gitlab/2026/10
- Citation: GitLab, “GitLab in October 2026” (2026-10-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/gitlab/2026/10 (CC BY 4.0).
- Markdown link: `[GitLab: GitLab in October 2026 (2026-10-01)](https://rewindex.com/company/gitlab/2026/10)`


---
Canonical: https://rewindex.com/company/gitlab/2026/10 · Markdown: https://rewindex.com/company/gitlab/2026/10.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T15:34:00.448Z