We decided to [take] a close look at seven of the most popular programming languages today to see which are the most secure. [...] The research below is based on WhiteSource’s comprehensive database which aggregates information on open source vulnerabilities from multiple sources like the National Vulnerability Database (NVD), security advisories, GitHub issue trackers, and popular open source projects issue trackers. Of the 200+ languages that the database covers, we focused on open source security vulnerabilities in the seven most widely used languages over the past ten years to find out which programming languages are most secure, which vulnerability types (CWEs) are most common in each language, and why.
Contents
Chapter 1 - Is one language more secure than another? - Vulnerabilities per language over time - High severity vulnerabilities over time
Chapter 2 - Different security vulnerabilities for different languages (CWES) --- C - Security Analysis --- Java- Security Analysis --- JavaScript- Security Analysis --- PHP- Security Analysis --- C++- Security Analysis --- Python- Security Analysis --- Ruby- Security Analysis
A very short whitepaper comparing security vulnerabilities (CWEs -Common Weaknesses Enumeration, see https://cwe.mitre.org/data/definition...) for seven popular programming languages: C, Java, Javasript, PHP, C++, Python and Ruby from 2009 to 2018 based on a company (Whitesource) database WhiteSource’s which purports to aggregate "... information on open source vulnerabilities from multiple sources like the National Vulnerability Database (NVD), security advisories, GitHub issue trackers, and popular open source projects issue trackers."
There is no attempt to distinguish between different versions of languages or compilers, say Python 2 and Python 3.