This document specifies software programming language vulnerabilities to be avoided in thedevelopment of systems where assured behaviour is required for security, safety, mission-critical andbusiness-critical software. In general, this guidance is applicable to the software developed, reviewed,or maintained for any application.








