Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by mje__ on Monday January 28, 2013 @06:55PM (#5131528)

It was pretty interesting to see the all-time details for the languages:

* Python [1,2] : 20 + 15 = 35

* Ruby [3,4] : 31 + 8 = 39

* PHP [5] : 336

Ouch :(

[1] http://www.cvedetails.com/product/2147/Python-Software-Found...

[2] http://www.cvedetails.com/product/18230/Python-Python.html?v...

[3] http://www.cvedetails.com/product/12215/Ruby-lang-Ruby.html?...

[4] http://www.cvedetails.com/product/3861/Yukihiro-Matsumoto-Ru...

[5] http://www.cvedetails.com/product/128/PHP-PHP.html?vendor_id...

edit:formatting

[ Parent | on HN ]

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by thingification on Monday January 28, 2013 @08:12PM (#5131792)

That seems a little unfair on PHP if taken at face value. I don't know PHP, but doesn't it come with things like database client libraries and templating? That's not really comparable with the core Python distribution.

Presumably a fairer comparison would compare (Python + Django) with (Ruby + RoR) with PHP?

[ Parent | on HN ]