Two critical vulnerabilities in one of the web’s most widely used programming languages have put server security under scrutiny