GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain

Why a CVSS 10.0 path traversal in GitLab's commits API is more dangerous than the bug class suggests, and how to remediate beyond patching.