A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.