GitLab urges immediate upgrades after two critical 9.9-rated RCE flaws let attackers run code through CI/CD regex.