[chockchocschoir]

Java doesn't make exploitable RCEs more or less possible than any other programming language. Or do you have something to back this up beyond the common "Java be bad" trope?

[formerly_proven]

Java certainly has a long history of RCEs caused by Java Serialization.

[chockchocschoir]

Comparing Java Serialization with $language Serialization, and the usage of both of the languages, does Java have more RCEs per line written than $language? Or is it just a function of its popularity?