LEMON BLOG

If you've been treating React2Shell as a December problem that everyone patched and moved on from, the last couple of months are a reminder that the internet doesn't work that way.

A new security advisory flags multiple vulnerabilities in the Django web framework, and the overall message is pretty clear: if you run Django in production, this is an update you should treat as urgent. The advisory describes a mix of SQL injection flaws and denial-of-service issues that can threaten the integrity and availability of affected apps.

Google has issued an urgent security update for Chrome after uncovering a high-severity vulnerability that could allow attackers to bypass important browser security restrictions. While no active exploitation has been confirmed yet, the nature of the flaw makes it a serious concern for both individual users and organisations.

The internet had a rough morning when countless websites suddenly began throwing "500 Internal Server Error" messages. From small blogs to large enterprise platforms, traffic across the globe was briefly disrupted — all pointing back to Cloudflare, one of the world's biggest internet infrastructure providers.

Microsoft has issued a serious warning for developers using ASP.NET Core — a popular framework powering countless web applications worldwide. A newly discovered flaw, tagged CVE-2025-55315, could allow attackers to bypass key security mechanisms remotely, posing a severe risk to enterprise environments.