GitLab's CVSS 10.0 path-traversal flaw and a ConnectWise ScreenConnect KEV addition landed the same week — one hits source code, the other hits every client an MSP touches.