<story><title>Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3</title><url>https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo</url></story><parent_chain><item><author>veloper</author><text>If everyone is really going to take the route of &quot;My X Framework is fine b/c nothing&apos;s been reported&quot; then I&apos;d like to contribute these links showing vulnerability break downs...&lt;p&gt;* Rails: &lt;a href=&quot;http://www.cvedetails.com/product/22568/Rubyonrails-Ruby-On-Rails.html?vendor_id=12043&quot; rel=&quot;nofollow&quot;&gt;http://www.cvedetails.com/product/22568/Rubyonrails-Ruby-On-...&lt;/a&gt;&lt;p&gt;* Django: &lt;a href=&quot;http://www.cvedetails.com/product/18211/Djangoproject-Django.html?vendor_id=10199&quot; rel=&quot;nofollow&quot;&gt;http://www.cvedetails.com/product/18211/Djangoproject-Django...&lt;/a&gt;&lt;p&gt;* CodeIgniter: &lt;a href=&quot;http://www.cvedetails.com/product/11625/Codeigniter-Codeigniter.html?vendor_id=6918&quot; rel=&quot;nofollow&quot;&gt;http://www.cvedetails.com/product/11625/Codeigniter-Codeigni...&lt;/a&gt;&lt;p&gt;* Top 50 Products (Better stop using these too! /s): &lt;a href=&quot;http://www.cvedetails.com/top-50-products.php&quot; rel=&quot;nofollow&quot;&gt;http://www.cvedetails.com/top-50-products.php&lt;/a&gt;</text></item></parent_chain><comment><author>glfomfn</author><text>You are shooting your own feet with these links you know. According to your data Django had -ZERO- sql injections &amp;#38; code execution repots, now compare that to RoR which had 6 sql injections &amp;#38; 3 code execution reports since 2009. Even if you went by just the numbers RoR had way more vulnerabilities, now if you also take in consideration the kind of vulnerabilities i can tell you i feel way safer on django than RoR.&lt;p&gt;How many times did you have to stay up late at night to patch your framework ?</text></comment>
<story><title>Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3</title><url>https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo</url></story><parent_chain><item><author>veloper</author><text>If everyone is really going to take the route of &quot;My X Framework is fine b/c nothing&apos;s been reported&quot; then I&apos;d like to contribute these links showing vulnerability break downs...&lt;p&gt;* Rails: &lt;a href=&quot;http://www.cvedetails.com/product/22568/Rubyonrails-Ruby-On-Rails.html?vendor_id=12043&quot; rel=&quot;nofollow&quot;&gt;http://www.cvedetails.com/product/22568/Rubyonrails-Ruby-On-...&lt;/a&gt;&lt;p&gt;* Django: &lt;a href=&quot;http://www.cvedetails.com/product/18211/Djangoproject-Django.html?vendor_id=10199&quot; rel=&quot;nofollow&quot;&gt;http://www.cvedetails.com/product/18211/Djangoproject-Django...&lt;/a&gt;&lt;p&gt;* CodeIgniter: &lt;a href=&quot;http://www.cvedetails.com/product/11625/Codeigniter-Codeigniter.html?vendor_id=6918&quot; rel=&quot;nofollow&quot;&gt;http://www.cvedetails.com/product/11625/Codeigniter-Codeigni...&lt;/a&gt;&lt;p&gt;* Top 50 Products (Better stop using these too! /s): &lt;a href=&quot;http://www.cvedetails.com/top-50-products.php&quot; rel=&quot;nofollow&quot;&gt;http://www.cvedetails.com/top-50-products.php&lt;/a&gt;</text></item></parent_chain><comment><author>justsee</author><text>Interesting.&lt;p&gt;Rails: numerous code execution and SQL injection vulnerabilities reported over the years.&lt;p&gt;Django: no code execution or SQL injection vulnerabilities reported.</text></comment>