Security advisory: Critical remote code execution vulnerabilities, update now