How is it possible that a language can generate a vulnerability?