No. I'm basing it on this database: http://www.cvedetails.com/vulnerability-list/vendor_id-12043/product_id-22568/Rubyonrails-Ruby-On-Rails.html http://www.cve

No. I'm basing it on this database: http://www.cvedetails.com/vulnerability-list/vendor_id-12043/product_id-22568/Rubyonrails-Ruby-On-Rails.html http://www.cvedetails.com/vulnerability-list/vendor_id-12043... http://www.cvedetails.com/vulnerability-list/vendor_id-10199/product_id-18211/Djangoproject-Django.html http://www.cvedetails.com/vulnerability-list/vendor_id-10199... Django has 16 vulnerabilities of the DoS, XSS, and CSRF variety. Rails has 37. In addition to DoS, XSS, and CSRF, it has SQL injection and code execution. That we keep seeing similar vulnerabilities suggests the problem is systemic. Giving them praise for not sweeping these under the rug is giving someone praise for not being a sociopath.