[matdrewin]

On one hand, I find that Rails often has security issues. On the other hand, perhaps it is just indicative of its popularity and interest. When a framework has no security issues, is it because there are none or is it just that no one can be bothered to look for some?

[elliotec]

Excellent point. Also the fact is there will be people working on these immediately.

[masterleep]

The last entries on the Rails security list before this were from June of 2015. Does that seem like a lot to you?