GitLab released emergency updates for two critical flaws enabling authenticated users to execute arbitrary code via crafted CI/CD regular expressions.