nyx/tests/recall_targets/xlang/java/openmrs.json

1532 lines
54 KiB
JSON

{
"_doc": "Phase 17 cross-lang recall-validation baseline for openmrs (Java/Hibernate). Re-capture by running scripts/validate_recall.sh --lang java openmrs <clone_path> --capture. Heavy JPA-Criteria-API consumer — see project_realrepo_openmrs.md for context. 2026-05-09 session 0011: 94 vendored-asset findings removed (jquery / jquery-ui / jsTree / dataTables minified bundles under WEB-INF/.../scripts/) after engine-level skip in is_vendored_asset_path; the engine no longer parses .min.js / vendor/ / bower_components/ web assets.",
"target": "openmrs",
"lang": "java",
"clone_url": "https://github.com/openmrs/openmrs-core",
"exercises_recall_items": [],
"captured_against": "real-scan @ f9c76db207c37f2c728ca3b601ae720b654ab401",
"captured_on": "2026-05-10",
"pinned_commit": "f9c76db207c37f2c728ca3b601ae720b654ab401",
"findings": [
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/StartupFilter.java",
"line": 169,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/StartupFilter.java",
"line": 311,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
"line": 252,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-xxe",
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleFileParser.java",
"line": 248,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-use-after-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/AddConceptMapTypesChangeset.java",
"line": 201,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-use-after-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
"line": 283,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-use-after-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 736,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-use-after-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
"line": 114,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-use-after-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
"line": 69,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-use-after-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
"line": 83,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-use-after-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
"line": 103,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-use-after-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
"line": 120,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-use-after-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
"line": 136,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-use-after-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
"line": 155,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "api/src/main/java/org/openmrs/util/OpenmrsUtil.java",
"line": 1955,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.cmdi.runtime_exec",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/SourceMySqldiffFile.java",
"line": 210,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.cmdi.runtime_exec",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/SourceMySqldiffFile.java",
"line": 211,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.cmdi.runtime_exec",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
"line": 83,
"severity": "High",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-prototype-pollution",
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
"line": 141,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-prototype-pollution",
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
"line": 88,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
"line": 139,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "api/src/test/java/org/openmrs/test/TestUtil.java",
"line": 76,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-prototype-pollution",
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
"line": 145,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-double-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
"line": 115,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-double-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
"line": 122,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-double-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
"line": 175,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-double-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
"line": 76,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-double-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
"line": 84,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-double-close",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
"line": 164,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-prototype-pollution",
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
"line": 91,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
"line": 426,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
"line": 502,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
"line": 506,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
"line": 507,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-unsanitised-flow",
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
"line": 426,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/hl7/impl/HL7ServiceImpl.java",
"line": 1133,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleUtil.java",
"line": 110,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleUtil.java",
"line": 680,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleUtil.java",
"line": 1259,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/scheduler/tasks/CheckInternetConnectivityTask.java",
"line": 44,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
"line": 288,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
"line": 772,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 170,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/HttpClient.java",
"line": 53,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/OpenmrsUtil.java",
"line": 1646,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/UpgradeUtil.java",
"line": 113,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/UpgradeUtil.java",
"line": 138,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
"line": 71,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/CheckDrugOrderUnitAndFrequencyTextNotMappedToConcepts.java",
"line": 35,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 78,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 444,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 505,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 524,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 579,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/CreateCodedOrderFrequencyForDrugOrderFrequencyChangeset.java",
"line": 36,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/CreateDiscontinueOrders.java",
"line": 36,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/CreateDiscontinueOrders.java",
"line": 118,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DisableTriggersChangeSet.java",
"line": 33,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateEncounterRoleNameChangeSet.java",
"line": 75,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateEncounterRoleNameChangeSet.java",
"line": 121,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateEncounterTypeNameChangeSet.java",
"line": 74,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateEncounterTypeNameChangeSet.java",
"line": 120,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateLocationAttributeTypeNameChangeSet.java",
"line": 75,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateLocationAttributeTypeNameChangeSet.java",
"line": 114,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/EnableTriggersChangeSet.java",
"line": 33,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/EncryptSecretAnswersChangeSet.java",
"line": 42,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/EncryptSecretAnswersChangeSet.java",
"line": 48,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
"line": 100,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/GenerateUuid.java",
"line": 150,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateAllergiesChangeSet.java",
"line": 63,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateAllergiesChangeSet.java",
"line": 161,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateConceptReferenceTermChangeSet.java",
"line": 51,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateDrugOrderFrequencyToCodedOrderFrequencyChangeset.java",
"line": 34,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MigrateDrugOrderUnitsToCodedDoseUnitsChangeset.java",
"line": 36,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MoveDeletedHL7sChangeSet.java",
"line": 38,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/MoveDeletedHL7sChangeSet.java",
"line": 60,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/SourceMySqldiffFile.java",
"line": 89,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/UpdateCohortMemberIdsChangeset.java",
"line": 41,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/UpdateCohortMemberIdsChangeset.java",
"line": 47,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/UpdateLayoutAddressFormatChangeSet.java",
"line": 41,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/UpdateLayoutAddressFormatChangeSet.java",
"line": 47,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/module/web/ModuleResourcesServlet.java",
"line": 68,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/StartupFilter.java",
"line": 169,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/StartupFilter.java",
"line": 311,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/DatabaseDetective.java",
"line": 48,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
"line": 143,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
"line": 226,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/update/UpdateFilter.java",
"line": 439,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/util/FilterUtil.java",
"line": 134,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/util/FilterUtil.java",
"line": 244,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/test/java/org/openmrs/test/TestUtil.java",
"line": 86,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/test/java/org/openmrs/test/TestUtil.java",
"line": 94,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleUtil.java",
"line": 736,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
"line": 491,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/HttpClient.java",
"line": 78,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/HttpUrl.java",
"line": 36,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/OpenmrsUtil.java",
"line": 914,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/UpgradeUtil.java",
"line": 127,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
"line": 146,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
"line": 159,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
"line": 167,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
"line": 210,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DisableTriggersChangeSet.java",
"line": 42,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/EnableTriggersChangeSet.java",
"line": 42,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/InitializationFilter.java",
"line": 1976,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
"line": 270,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/update/UpdateFilter.java",
"line": 372,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/util/FilterUtil.java",
"line": 200,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/DbSession.java",
"line": 112,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/DbSession.java",
"line": 122,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/DbSession.java",
"line": 176,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/HibernateOrderDAO.java",
"line": 390,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/HibernatePatientDAO.java",
"line": 966,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/type/StringEnumType.java",
"line": 49,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/api/impl/PatientServiceImpl.java",
"line": 1238,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleFileParser.java",
"line": 587,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/serialization/SimpleXStreamSerializer.java",
"line": 104,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
"line": 490,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 86,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 89,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 92,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 95,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 98,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 101,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 104,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 107,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/AddConceptMapTypesChangeset.java",
"line": 198,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/BooleanConceptChangeSet.java",
"line": 279,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 505,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 524,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 733,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/InitializationFilter.java",
"line": 1218,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/TestInstallUtil.java",
"line": 83,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "taint-data-exfiltration",
"path_suffix": "webapp/src/main/webapp/WEB-INF/csrfguard.js",
"line": 111,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.cmdi.runtime_exec",
"path_suffix": "api/src/test/java/org/openmrs/test/MigrateDataSet.java",
"line": 182,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.cmdi.runtime_exec",
"path_suffix": "api/src/test/java/org/openmrs/test/MigrateDataSet.java",
"line": 182,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.deser.readobject",
"path_suffix": "api/src/test/java/org/openmrs/util/ThreadSafeCircularFifoQueueTest.java",
"line": 384,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.deser.readobject",
"path_suffix": "api/src/test/java/org/openmrs/util/ThreadSafeCircularFifoQueueTest.java",
"line": 483,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/api/context/ServiceContext.java",
"line": 779,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/api/db/hibernate/type/StringEnumType.java",
"line": 49,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/api/impl/PatientServiceImpl.java",
"line": 1238,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/module/ModuleFileParser.java",
"line": 587,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/serialization/SimpleXStreamSerializer.java",
"line": 104,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
"line": 490,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 82,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 86,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 89,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 92,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 95,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 98,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 101,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 104,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 107,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/InitializationFilter.java",
"line": 1191,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/InitializationFilter.java",
"line": 1193,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.class_forname",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/initialization/InitializationFilter.java",
"line": 1195,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.method_invoke",
"path_suffix": "api/src/main/java/org/openmrs/PatientIdentifier.java",
"line": 146,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.method_invoke",
"path_suffix": "api/src/main/java/org/openmrs/PatientIdentifier.java",
"line": 147,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.method_invoke",
"path_suffix": "api/src/main/java/org/openmrs/PersonAttribute.java",
"line": 172,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.method_invoke",
"path_suffix": "api/src/main/java/org/openmrs/PersonAttribute.java",
"line": 173,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.method_invoke",
"path_suffix": "api/src/main/java/org/openmrs/aop/RequiredDataAdvice.java",
"line": 361,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.method_invoke",
"path_suffix": "api/src/main/java/org/openmrs/api/impl/DomainServiceImpl.java",
"line": 179,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.reflection.method_invoke",
"path_suffix": "api/src/main/java/org/openmrs/util/OpenmrsUtil.java",
"line": 1374,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.xss.getwriter_print",
"path_suffix": "web/src/main/java/org/openmrs/web/filter/update/UpdateFilter.java",
"line": 278,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "js.code_exec.eval",
"path_suffix": "webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jquery-ui-timepicker-addon.js",
"line": 139,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConvertOrderersToProviders.java",
"line": 37,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.sqli.execute_concat",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 505,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.sqli.execute_concat",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConceptValidatorChangeSet.java",
"line": 524,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.sqli.execute_concat",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/DuplicateLocationAttributeTypeNameChangeSet.java",
"line": 86,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "java.sqli.execute_concat",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/ConvertOrderersToProviders.java",
"line": 86,
"severity": "Medium",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/module/ModuleFileParserUnitTest.java",
"line": 121,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/module/ModuleUtilTest.java",
"line": 600,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/test/MigrateDataSet.java",
"line": 107,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/test/jupiter/BaseContextSensitiveNonTransactionalTest.java",
"line": 698,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/util/databasechange/Database1_9_7UpgradeIT.java",
"line": 464,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/util/databasechange/DatabaseUpgradeTestUtil.java",
"line": 106,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak",
"path_suffix": "web/src/test/java/org/openmrs/web/filter/update/GZIPFilterTest.java",
"line": 76,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/module/ModuleFileParserTest.java",
"line": 165,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/test/CreateConceptDictionaryDataSet.java",
"line": 50,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/test/CreateInitialDataSet.java",
"line": 101,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/test/TestUtil.java",
"line": 86,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/util/DatabaseIT.java",
"line": 121,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-resource-leak",
"path_suffix": "api/src/test/java/org/openmrs/util/HttpClientTest.java",
"line": 40,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "api/src/test/java/org/openmrs/test/DbUtil.java",
"line": 111,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "cfg-unguarded-sink",
"path_suffix": "test-suite/performance/src/test/java/org/openmrs/StartupPerformanceIT.java",
"line": 251,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak-possible",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUpdater.java",
"line": 429,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak-possible",
"path_suffix": "api/src/main/java/org/openmrs/util/DatabaseUtil.java",
"line": 163,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak-possible",
"path_suffix": "api/src/main/java/org/openmrs/util/OpenmrsUtil.java",
"line": 243,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak-possible",
"path_suffix": "api/src/main/java/org/openmrs/util/UpgradeUtil.java",
"line": 83,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
},
{
"rule_id": "state-resource-leak-possible",
"path_suffix": "api/src/main/java/org/openmrs/util/databasechange/AddConceptMapTypesChangeset.java",
"line": 90,
"severity": "Low",
"verdict": "needs_review",
"note": "captured by validate_recall.sh --capture"
}
]
}