Hacker News Reader

List a single language for web development that hasn't had a single RCE vulnerability

C# (ASP.NET) and Java.

Java has had plenty. Remember when everyone in security flinched when they heard the words "java.io.Serializable"?