Apache Johnzon – SpotBugs Bug Detector Report

SpotBugs Bug Detector Report

The following document contains the results of SpotBugs

SpotBugs Version is 4.9.8

Threshold is medium

Effort is default

Summary

Classes	Bugs	Errors	Missing Classes
1694	457	0	0

Files

Class	Bugs
org.apache.johnzon.core.AbstractJsonFactory	1
org.apache.johnzon.core.JsonArrayBuilderImpl	1
org.apache.johnzon.core.JsonBuilderFactoryImpl	1
org.apache.johnzon.core.JsonChars	1
org.apache.johnzon.core.JsonGeneratorFactoryImpl	3
org.apache.johnzon.core.JsonGeneratorImpl	4
org.apache.johnzon.core.JsonMergePatchImpl	1
org.apache.johnzon.core.JsonNumberImpl	1
org.apache.johnzon.core.JsonObjectBuilderImpl	1
org.apache.johnzon.core.JsonObjectImpl	2
org.apache.johnzon.core.JsonParserFactoryImpl	1
org.apache.johnzon.core.JsonPointerImpl	1
org.apache.johnzon.core.JsonProviderImpl	4
org.apache.johnzon.core.JsonReaderImpl	1
org.apache.johnzon.core.JsonStreamParserImpl	4
org.apache.johnzon.core.JsonStringImpl	1
org.apache.johnzon.core.RejectDuplicateKeysMode	1
org.apache.johnzon.core.Snippet$Buffer$SnippetWriter	1
org.apache.johnzon.mapper.JohnzonCores	1
org.apache.johnzon.mapper.MapperBuilder	2
org.apache.johnzon.mapper.MapperConfig	12
org.apache.johnzon.mapper.MappingGeneratorImpl	2
org.apache.johnzon.mapper.MappingParserImpl	3
org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter	1
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy	1
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType	2
org.apache.johnzon.mapper.access.FieldAndMethodAccessMode	1
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType	2
org.apache.johnzon.mapper.map.LazyConverterMap	2
org.apache.johnzon.mapper.reflection.JohnzonParameterizedType	1
org.apache.johnzon.jaxrs.DelegateProvider	1
org.apache.johnzon.jaxrs.JohnzonMessageBodyReader	1
org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter	1
org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter	1
org.apache.johnzon.core.AbstractJsonFactory	1
org.apache.johnzon.core.JsonArrayBuilderImpl	1
org.apache.johnzon.core.JsonBuilderFactoryImpl	1
org.apache.johnzon.core.JsonChars	1
org.apache.johnzon.core.JsonGeneratorFactoryImpl	3
org.apache.johnzon.core.JsonGeneratorImpl	4
org.apache.johnzon.core.JsonMergePatchImpl	1
org.apache.johnzon.core.JsonNumberImpl	1
org.apache.johnzon.core.JsonObjectBuilderImpl	1
org.apache.johnzon.core.JsonObjectImpl	2
org.apache.johnzon.core.JsonParserFactoryImpl	1
org.apache.johnzon.core.JsonPointerImpl	1
org.apache.johnzon.core.JsonProviderImpl	4
org.apache.johnzon.core.JsonReaderImpl	1
org.apache.johnzon.core.JsonStreamParserImpl	4
org.apache.johnzon.core.JsonStringImpl	1
org.apache.johnzon.core.RejectDuplicateKeysMode	1
org.apache.johnzon.core.Snippet$Buffer$SnippetWriter	1
org.apache.johnzon.mapper.JohnzonCores	1
org.apache.johnzon.mapper.MapperBuilder	2
org.apache.johnzon.mapper.MapperConfig	12
org.apache.johnzon.mapper.MappingGeneratorImpl	2
org.apache.johnzon.mapper.MappingParserImpl	3
org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter	1
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy	1
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType	2
org.apache.johnzon.mapper.access.FieldAndMethodAccessMode	1
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType	2
org.apache.johnzon.mapper.map.LazyConverterMap	2
org.apache.johnzon.mapper.reflection.JohnzonParameterizedType	1
org.apache.johnzon.jaxrs.DelegateProvider	1
org.apache.johnzon.jaxrs.JohnzonMessageBodyReader	1
org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter	1
org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter	1
org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider	1
org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1	1
org.apache.johnzon.jsonb.JohnzonBuilder	3
org.apache.johnzon.jsonb.JohnzonJsonb	1
org.apache.johnzon.jsonb.JsonbAccessMode	2
org.apache.johnzon.jsonb.JsonbAccessMode$2	1
org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters	1
org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1	1
org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters	1
org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory	1
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo	2
org.apache.johnzon.websocket.jsonb.JsonbTextDecoder	2
org.apache.johnzon.websocket.jsr.JsrObjectDecoder	1
org.apache.johnzon.websocket.jsr.JsrStructureDecoder	1
org.apache.johnzon.websocket.mapper.JohnzonTextDecoder	1
org.apache.johnzon.jsonschema.JsonSchemaValidator	1
org.apache.johnzon.jsonschema.JsonSchemaValidatorFactory	1
org.apache.johnzon.jsonschema.ValidationResult	2
org.apache.johnzon.jsonschema.generator.PojoGenerator	1
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref	3
org.apache.johnzon.jsonschema.generator.Schema	18
org.apache.johnzon.jsonschema.generator.SchemaProcessor	3
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache	2
org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor	1
org.apache.johnzon.jsonschema.spi.ValidationContext	2
org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl	1
org.apache.johnzon.maven.plugin.ExampleToModelMojo	3
org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo	1
org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1	1
org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo	1
org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper	2
org.apache.johnzon.osgi.Activator	1
org.apache.johnzon.jsonlogic.JohnzonJsonLogic	3
org.apache.johnzon.core.AbstractJsonFactory	1
org.apache.johnzon.core.JsonArrayBuilderImpl	1
org.apache.johnzon.core.JsonBuilderFactoryImpl	1
org.apache.johnzon.core.JsonChars	1
org.apache.johnzon.core.JsonGeneratorFactoryImpl	3
org.apache.johnzon.core.JsonGeneratorImpl	4
org.apache.johnzon.core.JsonMergePatchImpl	1
org.apache.johnzon.core.JsonNumberImpl	1
org.apache.johnzon.core.JsonObjectBuilderImpl	1
org.apache.johnzon.core.JsonObjectImpl	2
org.apache.johnzon.core.JsonParserFactoryImpl	1
org.apache.johnzon.core.JsonPointerImpl	1
org.apache.johnzon.core.JsonProviderImpl	4
org.apache.johnzon.core.JsonReaderImpl	1
org.apache.johnzon.core.JsonStreamParserImpl	4
org.apache.johnzon.core.JsonStringImpl	1
org.apache.johnzon.core.RejectDuplicateKeysMode	1
org.apache.johnzon.core.Snippet$Buffer$SnippetWriter	1
org.apache.johnzon.mapper.JohnzonCores	1
org.apache.johnzon.mapper.MapperBuilder	2
org.apache.johnzon.mapper.MapperConfig	12
org.apache.johnzon.mapper.MappingGeneratorImpl	2
org.apache.johnzon.mapper.MappingParserImpl	3
org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter	1
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy	1
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType	2
org.apache.johnzon.mapper.access.FieldAndMethodAccessMode	1
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType	2
org.apache.johnzon.mapper.map.LazyConverterMap	2
org.apache.johnzon.mapper.reflection.JohnzonParameterizedType	1
org.apache.johnzon.jaxrs.DelegateProvider	1
org.apache.johnzon.jaxrs.JohnzonMessageBodyReader	1
org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter	1
org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter	1
org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider	1
org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1	1
org.apache.johnzon.jsonb.JohnzonBuilder	3
org.apache.johnzon.jsonb.JohnzonJsonb	1
org.apache.johnzon.jsonb.JsonbAccessMode	2
org.apache.johnzon.jsonb.JsonbAccessMode$2	1
org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters	1
org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1	1
org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters	1
org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory	1
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo	2
org.apache.johnzon.websocket.jsonb.JsonbTextDecoder	2
org.apache.johnzon.websocket.jsr.JsrObjectDecoder	1
org.apache.johnzon.websocket.jsr.JsrStructureDecoder	1
org.apache.johnzon.websocket.mapper.JohnzonTextDecoder	1
org.apache.johnzon.jsonschema.JsonSchemaValidator	1
org.apache.johnzon.jsonschema.JsonSchemaValidatorFactory	1
org.apache.johnzon.jsonschema.ValidationResult	2
org.apache.johnzon.jsonschema.generator.PojoGenerator	1
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref	3
org.apache.johnzon.jsonschema.generator.Schema	18
org.apache.johnzon.jsonschema.generator.SchemaProcessor	3
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache	2
org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor	1
org.apache.johnzon.jsonschema.spi.ValidationContext	2
org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl	1
org.apache.johnzon.maven.plugin.ExampleToModelMojo	3
org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo	1
org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1	1
org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo	1
org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper	2
org.apache.johnzon.osgi.Activator	1
org.apache.johnzon.jsonlogic.JohnzonJsonLogic	3
org.apache.johnzon.core.AbstractJsonFactory	1
org.apache.johnzon.core.JsonArrayBuilderImpl	1
org.apache.johnzon.core.JsonBuilderFactoryImpl	1
org.apache.johnzon.core.JsonChars	1
org.apache.johnzon.core.JsonGeneratorFactoryImpl	3
org.apache.johnzon.core.JsonGeneratorImpl	4
org.apache.johnzon.core.JsonMergePatchImpl	1
org.apache.johnzon.core.JsonNumberImpl	1
org.apache.johnzon.core.JsonObjectBuilderImpl	1
org.apache.johnzon.core.JsonObjectImpl	2
org.apache.johnzon.core.JsonParserFactoryImpl	1
org.apache.johnzon.core.JsonPointerImpl	1
org.apache.johnzon.core.JsonProviderImpl	4
org.apache.johnzon.core.JsonReaderImpl	1
org.apache.johnzon.core.JsonStreamParserImpl	4
org.apache.johnzon.core.JsonStringImpl	1
org.apache.johnzon.core.RejectDuplicateKeysMode	1
org.apache.johnzon.core.Snippet$Buffer$SnippetWriter	1
org.apache.johnzon.mapper.JohnzonCores	1
org.apache.johnzon.mapper.MapperBuilder	2
org.apache.johnzon.mapper.MapperConfig	12
org.apache.johnzon.mapper.MappingGeneratorImpl	2
org.apache.johnzon.mapper.MappingParserImpl	3
org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter	1
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy	1
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType	2
org.apache.johnzon.mapper.access.FieldAndMethodAccessMode	1
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType	2
org.apache.johnzon.mapper.map.LazyConverterMap	2
org.apache.johnzon.mapper.reflection.JohnzonParameterizedType	1
org.apache.johnzon.jaxrs.DelegateProvider	1
org.apache.johnzon.jaxrs.JohnzonMessageBodyReader	1
org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter	1
org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter	1
org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider	1
org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1	1
org.apache.johnzon.jsonb.JohnzonBuilder	3
org.apache.johnzon.jsonb.JohnzonJsonb	1
org.apache.johnzon.jsonb.JsonbAccessMode	2
org.apache.johnzon.jsonb.JsonbAccessMode$2	1
org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters	1
org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1	1
org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters	1
org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory	1
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo	2
org.apache.johnzon.websocket.jsonb.JsonbTextDecoder	2
org.apache.johnzon.websocket.jsr.JsrObjectDecoder	1
org.apache.johnzon.websocket.jsr.JsrStructureDecoder	1
org.apache.johnzon.websocket.mapper.JohnzonTextDecoder	1
org.apache.johnzon.jsonschema.JsonSchemaValidator	1
org.apache.johnzon.jsonschema.JsonSchemaValidatorFactory	1
org.apache.johnzon.jsonschema.ValidationResult	2
org.apache.johnzon.jsonschema.generator.PojoGenerator	1
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref	3
org.apache.johnzon.jsonschema.generator.Schema	18
org.apache.johnzon.jsonschema.generator.SchemaProcessor	3
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache	2
org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor	1
org.apache.johnzon.jsonschema.spi.ValidationContext	2
org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl	1
org.apache.johnzon.maven.plugin.ExampleToModelMojo	3
org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo	1
org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1	1
org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo	1
org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper	2
org.apache.johnzon.osgi.Activator	1
org.apache.johnzon.jsonlogic.JohnzonJsonLogic	3

org.apache.johnzon.core.AbstractJsonFactory

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium

org.apache.johnzon.core.JsonArrayBuilderImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium

org.apache.johnzon.core.JsonBuilderFactoryImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium

org.apache.johnzon.core.JsonChars

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium

org.apache.johnzon.core.JsonGeneratorFactoryImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium

org.apache.johnzon.core.JsonGeneratorImpl

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High

org.apache.johnzon.core.JsonMergePatchImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium

org.apache.johnzon.core.JsonNumberImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium

org.apache.johnzon.core.JsonObjectBuilderImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium

org.apache.johnzon.core.JsonObjectImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium

org.apache.johnzon.core.JsonParserFactoryImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium

org.apache.johnzon.core.JsonPointerImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium

org.apache.johnzon.core.JsonProviderImpl

Bug	Category	Details	Line	Priority
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High

org.apache.johnzon.core.JsonReaderImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium

org.apache.johnzon.core.JsonStreamParserImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium

org.apache.johnzon.core.JsonStringImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium

org.apache.johnzon.core.RejectDuplicateKeysMode

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium

org.apache.johnzon.core.Snippet$Buffer$SnippetWriter

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High

org.apache.johnzon.mapper.JohnzonCores

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium

org.apache.johnzon.mapper.MapperBuilder

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium

org.apache.johnzon.mapper.MapperConfig

Bug	Category	Details	Line	Priority
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium

org.apache.johnzon.mapper.MappingGeneratorImpl

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High

org.apache.johnzon.mapper.MappingParserImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium

org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium

org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium

org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium

org.apache.johnzon.mapper.access.FieldAndMethodAccessMode

Bug	Category	Details	Line	Priority
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High

org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium

org.apache.johnzon.mapper.map.LazyConverterMap

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium

org.apache.johnzon.mapper.reflection.JohnzonParameterizedType

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium

org.apache.johnzon.jaxrs.DelegateProvider

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium

org.apache.johnzon.jaxrs.JohnzonMessageBodyReader

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium

org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium

org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High

org.apache.johnzon.core.AbstractJsonFactory

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium

org.apache.johnzon.core.JsonArrayBuilderImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium

org.apache.johnzon.core.JsonBuilderFactoryImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium

org.apache.johnzon.core.JsonChars

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium

org.apache.johnzon.core.JsonGeneratorFactoryImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium

org.apache.johnzon.core.JsonGeneratorImpl

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High

org.apache.johnzon.core.JsonMergePatchImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium

org.apache.johnzon.core.JsonNumberImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium

org.apache.johnzon.core.JsonObjectBuilderImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium

org.apache.johnzon.core.JsonObjectImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium

org.apache.johnzon.core.JsonParserFactoryImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium

org.apache.johnzon.core.JsonPointerImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium

org.apache.johnzon.core.JsonProviderImpl

Bug	Category	Details	Line	Priority
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High

org.apache.johnzon.core.JsonReaderImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium

org.apache.johnzon.core.JsonStreamParserImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium

org.apache.johnzon.core.JsonStringImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium

org.apache.johnzon.core.RejectDuplicateKeysMode

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium

org.apache.johnzon.core.Snippet$Buffer$SnippetWriter

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High

org.apache.johnzon.mapper.JohnzonCores

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium

org.apache.johnzon.mapper.MapperBuilder

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium

org.apache.johnzon.mapper.MapperConfig

Bug	Category	Details	Line	Priority
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium

org.apache.johnzon.mapper.MappingGeneratorImpl

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High

org.apache.johnzon.mapper.MappingParserImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium

org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium

org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium

org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium

org.apache.johnzon.mapper.access.FieldAndMethodAccessMode

Bug	Category	Details	Line	Priority
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High

org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium

org.apache.johnzon.mapper.map.LazyConverterMap

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium

org.apache.johnzon.mapper.reflection.JohnzonParameterizedType

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium

org.apache.johnzon.jaxrs.DelegateProvider

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium

org.apache.johnzon.jaxrs.JohnzonMessageBodyReader

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium

org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium

org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High

org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider

Bug	Category	Details	Line	Priority
Inconsistent synchronization of org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider.throwNoContentExceptionOnEmptyStreams; locked 80% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	92	Medium
Inconsistent synchronization of org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider.throwNoContentExceptionOnEmptyStreams; locked 80% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	92	Medium
Inconsistent synchronization of org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider.throwNoContentExceptionOnEmptyStreams; locked 80% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	92	Medium

org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1 at new org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1(JsonbJaxrsProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	111	Medium
Exception thrown in class org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1 at new org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1(JsonbJaxrsProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	111	Medium
Exception thrown in class org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1 at new org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1(JsonbJaxrsProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	111	Medium

org.apache.johnzon.jsonb.JohnzonBuilder

Bug	Category	Details	Line	Priority
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.lambda$build$5(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	147	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toBool(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	377	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toInt(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	381	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.lambda$build$5(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	147	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toBool(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	377	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toInt(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	381	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.lambda$build$5(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	147	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toBool(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	377	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toInt(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	381	Medium

org.apache.johnzon.jsonb.JohnzonJsonb

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jsonb.JohnzonJsonb(Mapper, boolean, Consumer) may expose internal representation by storing an externally mutable object into JohnzonJsonb.delegate	MALICIOUS_CODE	EI_EXPOSE_REP2	67	Medium
new org.apache.johnzon.jsonb.JohnzonJsonb(Mapper, boolean, Consumer) may expose internal representation by storing an externally mutable object into JohnzonJsonb.delegate	MALICIOUS_CODE	EI_EXPOSE_REP2	67	Medium
new org.apache.johnzon.jsonb.JohnzonJsonb(Mapper, boolean, Consumer) may expose internal representation by storing an externally mutable object into JohnzonJsonb.delegate	MALICIOUS_CODE	EI_EXPOSE_REP2	67	Medium

org.apache.johnzon.jsonb.JsonbAccessMode

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jsonb.JsonbAccessMode(PropertyNamingStrategy, String, PropertyVisibilityStrategy, boolean, Map, JohnzonAdapterFactory, JsonProvider, Supplier, Supplier, AccessMode, boolean, boolean, boolean) may expose internal representation by storing an externally mutable object into JsonbAccessMode.defaultConverters	MALICIOUS_CODE	EI_EXPOSE_REP2	177	Medium
Class<?> is incompatible with expected argument type org.apache.johnzon.mapper.internal.AdapterKey in org.apache.johnzon.jsonb.JsonbAccessMode.findFactory(Class, Function[])	CORRECTNESS	GC_UNRELATED_TYPES	269	High
new org.apache.johnzon.jsonb.JsonbAccessMode(PropertyNamingStrategy, String, PropertyVisibilityStrategy, boolean, Map, JohnzonAdapterFactory, JsonProvider, Supplier, Supplier, AccessMode, boolean, boolean, boolean) may expose internal representation by storing an externally mutable object into JsonbAccessMode.defaultConverters	MALICIOUS_CODE	EI_EXPOSE_REP2	177	Medium
Class<?> is incompatible with expected argument type org.apache.johnzon.mapper.internal.AdapterKey in org.apache.johnzon.jsonb.JsonbAccessMode.findFactory(Class, Function[])	CORRECTNESS	GC_UNRELATED_TYPES	269	High
new org.apache.johnzon.jsonb.JsonbAccessMode(PropertyNamingStrategy, String, PropertyVisibilityStrategy, boolean, Map, JohnzonAdapterFactory, JsonProvider, Supplier, Supplier, AccessMode, boolean, boolean, boolean) may expose internal representation by storing an externally mutable object into JsonbAccessMode.defaultConverters	MALICIOUS_CODE	EI_EXPOSE_REP2	177	Medium
Class<?> is incompatible with expected argument type org.apache.johnzon.mapper.internal.AdapterKey in org.apache.johnzon.jsonb.JsonbAccessMode.findFactory(Class, Function[])	CORRECTNESS	GC_UNRELATED_TYPES	269	High

org.apache.johnzon.jsonb.JsonbAccessMode$2

Bug	Category	Details	Line	Priority
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$2.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	326	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$2.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	326	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$2.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	326	High

org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters(JsonbAccessMode, AccessMode$DecoratedType) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1166	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters(JsonbAccessMode, AccessMode$DecoratedType) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1166	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters(JsonbAccessMode, AccessMode$DecoratedType) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1166	Medium

org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1

Bug	Category	Details	Line	Priority
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1144	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1144	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1144	High

org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters(JsonbAccessMode, AccessMode$DecoratedType, Types) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1225	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters(JsonbAccessMode, AccessMode$DecoratedType, Types) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1225	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters(JsonbAccessMode, AccessMode$DecoratedType, Types) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1225	Medium

org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory

Bug	Category	Details	Line	Priority
Public method org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory.create(Class) uses reflection to create a class it gets in its parameter which could increase the accessibility of any class	MALICIOUS_CODE	REFLC_REFLECTION_MAY_INCREASE_ACCESSIBILITY_OF_CLASS	27	Medium
Public method org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory.create(Class) uses reflection to create a class it gets in its parameter which could increase the accessibility of any class	MALICIOUS_CODE	REFLC_REFLECTION_MAY_INCREASE_ACCESSIBILITY_OF_CLASS	27	Medium
Public method org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory.create(Class) uses reflection to create a class it gets in its parameter which could increase the accessibility of any class	MALICIOUS_CODE	REFLC_REFLECTION_MAY_INCREASE_ACCESSIBILITY_OF_CLASS	27	Medium

org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getAliases() may expose internal representation by returning JsonbPolymorphismTypeInfo.aliases	MALICIOUS_CODE	EI_EXPOSE_REP	64	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getParents() may expose internal representation by returning JsonbPolymorphismTypeInfo.parents	MALICIOUS_CODE	EI_EXPOSE_REP	72	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getAliases() may expose internal representation by returning JsonbPolymorphismTypeInfo.aliases	MALICIOUS_CODE	EI_EXPOSE_REP	64	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getParents() may expose internal representation by returning JsonbPolymorphismTypeInfo.parents	MALICIOUS_CODE	EI_EXPOSE_REP	72	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getAliases() may expose internal representation by returning JsonbPolymorphismTypeInfo.aliases	MALICIOUS_CODE	EI_EXPOSE_REP	64	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getParents() may expose internal representation by returning JsonbPolymorphismTypeInfo.parents	MALICIOUS_CODE	EI_EXPOSE_REP	72	Medium

org.apache.johnzon.websocket.jsonb.JsonbTextDecoder

Bug	Category	Details	Line	Priority
Field JsonbTextDecoder.type masks field in superclass org.apache.johnzon.websocket.internal.TypeAwareDecoder	CORRECTNESS	MF_CLASS_MASKS_FIELD		Medium
Unwritten public or protected field: org.apache.johnzon.websocket.jsonb.JsonbTextDecoder.type	STYLE	UWF_UNWRITTEN_PUBLIC_OR_PROTECTED_FIELD	52	Medium
Field JsonbTextDecoder.type masks field in superclass org.apache.johnzon.websocket.internal.TypeAwareDecoder	CORRECTNESS	MF_CLASS_MASKS_FIELD		Medium
Unwritten public or protected field: org.apache.johnzon.websocket.jsonb.JsonbTextDecoder.type	STYLE	UWF_UNWRITTEN_PUBLIC_OR_PROTECTED_FIELD	52	Medium
Field JsonbTextDecoder.type masks field in superclass org.apache.johnzon.websocket.internal.TypeAwareDecoder	CORRECTNESS	MF_CLASS_MASKS_FIELD		Medium
Unwritten public or protected field: org.apache.johnzon.websocket.jsonb.JsonbTextDecoder.type	STYLE	UWF_UNWRITTEN_PUBLIC_OR_PROTECTED_FIELD	52	Medium

org.apache.johnzon.websocket.jsr.JsrObjectDecoder

Bug	Category	Details	Priority
Unused field: org.apache.johnzon.websocket.jsr.JsrObjectDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrObjectDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrObjectDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium

org.apache.johnzon.websocket.jsr.JsrStructureDecoder

Bug	Category	Details	Priority
Unused field: org.apache.johnzon.websocket.jsr.JsrStructureDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrStructureDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrStructureDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium

org.apache.johnzon.websocket.mapper.JohnzonTextDecoder

Bug	Category	Details	Line	Priority
new org.apache.johnzon.websocket.mapper.JohnzonTextDecoder(Mapper, Type) may expose internal representation by storing an externally mutable object into JohnzonTextDecoder.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	50	Medium
new org.apache.johnzon.websocket.mapper.JohnzonTextDecoder(Mapper, Type) may expose internal representation by storing an externally mutable object into JohnzonTextDecoder.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	50	Medium
new org.apache.johnzon.websocket.mapper.JohnzonTextDecoder(Mapper, Type) may expose internal representation by storing an externally mutable object into JohnzonTextDecoder.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	50	Medium

org.apache.johnzon.jsonschema.JsonSchemaValidator

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.JsonSchemaValidator.apply(JsonValue) may expose internal representation by returning JsonSchemaValidator.SUCCESS	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
org.apache.johnzon.jsonschema.JsonSchemaValidator.apply(JsonValue) may expose internal representation by returning JsonSchemaValidator.SUCCESS	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
org.apache.johnzon.jsonschema.JsonSchemaValidator.apply(JsonValue) may expose internal representation by returning JsonSchemaValidator.SUCCESS	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium

org.apache.johnzon.jsonschema.JsonSchemaValidatorFactory

Bug	Category	Details	Line	Priority
Shared primitive variable "failFast" in one thread may not yield the value of the most recent write from another thread	MT_CORRECTNESS	AT_STALE_THREAD_WRITE_OF_PRIMITIVE	109	Medium
Shared primitive variable "failFast" in one thread may not yield the value of the most recent write from another thread	MT_CORRECTNESS	AT_STALE_THREAD_WRITE_OF_PRIMITIVE	109	Medium
Shared primitive variable "failFast" in one thread may not yield the value of the most recent write from another thread	MT_CORRECTNESS	AT_STALE_THREAD_WRITE_OF_PRIMITIVE	109	Medium

org.apache.johnzon.jsonschema.ValidationResult

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.ValidationResult.getErrors() may expose internal representation by returning ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP	39	Medium
org.apache.johnzon.jsonschema.ValidationResult.setErrors(Collection) may expose internal representation by storing an externally mutable object into ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP2	43	Medium
org.apache.johnzon.jsonschema.ValidationResult.getErrors() may expose internal representation by returning ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP	39	Medium
org.apache.johnzon.jsonschema.ValidationResult.setErrors(Collection) may expose internal representation by storing an externally mutable object into ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP2	43	Medium
org.apache.johnzon.jsonschema.ValidationResult.getErrors() may expose internal representation by returning ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP	39	Medium
org.apache.johnzon.jsonschema.ValidationResult.setErrors(Collection) may expose internal representation by storing an externally mutable object into ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP2	43	Medium

org.apache.johnzon.jsonschema.generator.PojoGenerator

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.PojoGenerator.generate() may expose internal representation by returning PojoGenerator.nested	MALICIOUS_CODE	EI_EXPOSE_REP	69	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator.generate() may expose internal representation by returning PojoGenerator.nested	MALICIOUS_CODE	EI_EXPOSE_REP	69	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator.generate() may expose internal representation by returning PojoGenerator.nested	MALICIOUS_CODE	EI_EXPOSE_REP	69	Medium

org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getAttributes() may expose internal representation by returning PojoGenerator$Ref.attributes	MALICIOUS_CODE	EI_EXPOSE_REP	775	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getImports() may expose internal representation by returning PojoGenerator$Ref.imports	MALICIOUS_CODE	EI_EXPOSE_REP	771	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getNested() may expose internal representation by returning PojoGenerator$Ref.nested	MALICIOUS_CODE	EI_EXPOSE_REP	779	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getAttributes() may expose internal representation by returning PojoGenerator$Ref.attributes	MALICIOUS_CODE	EI_EXPOSE_REP	775	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getImports() may expose internal representation by returning PojoGenerator$Ref.imports	MALICIOUS_CODE	EI_EXPOSE_REP	771	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getNested() may expose internal representation by returning PojoGenerator$Ref.nested	MALICIOUS_CODE	EI_EXPOSE_REP	779	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getAttributes() may expose internal representation by returning PojoGenerator$Ref.attributes	MALICIOUS_CODE	EI_EXPOSE_REP	775	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getImports() may expose internal representation by returning PojoGenerator$Ref.imports	MALICIOUS_CODE	EI_EXPOSE_REP	771	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getNested() may expose internal representation by returning PojoGenerator$Ref.nested	MALICIOUS_CODE	EI_EXPOSE_REP	779	Medium

org.apache.johnzon.jsonschema.generator.Schema

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.Schema.getAllOf() may expose internal representation by returning Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP	178	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAnyOf() may expose internal representation by returning Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP	186	Medium
org.apache.johnzon.jsonschema.generator.Schema.getDefinitions() may expose internal representation by returning Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	146	Medium
org.apache.johnzon.jsonschema.generator.Schema.getEnumeration() may expose internal representation by returning Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP	218	Medium
org.apache.johnzon.jsonschema.generator.Schema.getItems() may expose internal representation by returning Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP	258	Medium
org.apache.johnzon.jsonschema.generator.Schema.getNot() may expose internal representation by returning Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP	338	Medium
org.apache.johnzon.jsonschema.generator.Schema.getOneOf() may expose internal representation by returning Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP	354	Medium
org.apache.johnzon.jsonschema.generator.Schema.getProperties() may expose internal representation by returning Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP	162	Medium
org.apache.johnzon.jsonschema.generator.Schema.getRequired() may expose internal representation by returning Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP	402	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAllOf(List) may expose internal representation by storing an externally mutable object into Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP2	182	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAnyOf(List) may expose internal representation by storing an externally mutable object into Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP2	190	Medium
org.apache.johnzon.jsonschema.generator.Schema.setDefinitions(Map) may expose internal representation by storing an externally mutable object into Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP2	150	Medium
org.apache.johnzon.jsonschema.generator.Schema.setEnumeration(List) may expose internal representation by storing an externally mutable object into Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP2	222	Medium
org.apache.johnzon.jsonschema.generator.Schema.setItems(Schema) may expose internal representation by storing an externally mutable object into Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP2	262	Medium
org.apache.johnzon.jsonschema.generator.Schema.setNot(Schema) may expose internal representation by storing an externally mutable object into Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP2	342	Medium
org.apache.johnzon.jsonschema.generator.Schema.setOneOf(List) may expose internal representation by storing an externally mutable object into Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP2	358	Medium
org.apache.johnzon.jsonschema.generator.Schema.setProperties(Map) may expose internal representation by storing an externally mutable object into Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP2	166	Medium
org.apache.johnzon.jsonschema.generator.Schema.setRequired(List) may expose internal representation by storing an externally mutable object into Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP2	406	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAllOf() may expose internal representation by returning Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP	178	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAnyOf() may expose internal representation by returning Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP	186	Medium
org.apache.johnzon.jsonschema.generator.Schema.getDefinitions() may expose internal representation by returning Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	146	Medium
org.apache.johnzon.jsonschema.generator.Schema.getEnumeration() may expose internal representation by returning Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP	218	Medium
org.apache.johnzon.jsonschema.generator.Schema.getItems() may expose internal representation by returning Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP	258	Medium
org.apache.johnzon.jsonschema.generator.Schema.getNot() may expose internal representation by returning Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP	338	Medium
org.apache.johnzon.jsonschema.generator.Schema.getOneOf() may expose internal representation by returning Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP	354	Medium
org.apache.johnzon.jsonschema.generator.Schema.getProperties() may expose internal representation by returning Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP	162	Medium
org.apache.johnzon.jsonschema.generator.Schema.getRequired() may expose internal representation by returning Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP	402	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAllOf(List) may expose internal representation by storing an externally mutable object into Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP2	182	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAnyOf(List) may expose internal representation by storing an externally mutable object into Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP2	190	Medium
org.apache.johnzon.jsonschema.generator.Schema.setDefinitions(Map) may expose internal representation by storing an externally mutable object into Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP2	150	Medium
org.apache.johnzon.jsonschema.generator.Schema.setEnumeration(List) may expose internal representation by storing an externally mutable object into Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP2	222	Medium
org.apache.johnzon.jsonschema.generator.Schema.setItems(Schema) may expose internal representation by storing an externally mutable object into Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP2	262	Medium
org.apache.johnzon.jsonschema.generator.Schema.setNot(Schema) may expose internal representation by storing an externally mutable object into Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP2	342	Medium
org.apache.johnzon.jsonschema.generator.Schema.setOneOf(List) may expose internal representation by storing an externally mutable object into Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP2	358	Medium
org.apache.johnzon.jsonschema.generator.Schema.setProperties(Map) may expose internal representation by storing an externally mutable object into Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP2	166	Medium
org.apache.johnzon.jsonschema.generator.Schema.setRequired(List) may expose internal representation by storing an externally mutable object into Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP2	406	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAllOf() may expose internal representation by returning Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP	178	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAnyOf() may expose internal representation by returning Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP	186	Medium
org.apache.johnzon.jsonschema.generator.Schema.getDefinitions() may expose internal representation by returning Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	146	Medium
org.apache.johnzon.jsonschema.generator.Schema.getEnumeration() may expose internal representation by returning Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP	218	Medium
org.apache.johnzon.jsonschema.generator.Schema.getItems() may expose internal representation by returning Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP	258	Medium
org.apache.johnzon.jsonschema.generator.Schema.getNot() may expose internal representation by returning Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP	338	Medium
org.apache.johnzon.jsonschema.generator.Schema.getOneOf() may expose internal representation by returning Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP	354	Medium
org.apache.johnzon.jsonschema.generator.Schema.getProperties() may expose internal representation by returning Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP	162	Medium
org.apache.johnzon.jsonschema.generator.Schema.getRequired() may expose internal representation by returning Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP	402	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAllOf(List) may expose internal representation by storing an externally mutable object into Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP2	182	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAnyOf(List) may expose internal representation by storing an externally mutable object into Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP2	190	Medium
org.apache.johnzon.jsonschema.generator.Schema.setDefinitions(Map) may expose internal representation by storing an externally mutable object into Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP2	150	Medium
org.apache.johnzon.jsonschema.generator.Schema.setEnumeration(List) may expose internal representation by storing an externally mutable object into Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP2	222	Medium
org.apache.johnzon.jsonschema.generator.Schema.setItems(Schema) may expose internal representation by storing an externally mutable object into Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP2	262	Medium
org.apache.johnzon.jsonschema.generator.Schema.setNot(Schema) may expose internal representation by storing an externally mutable object into Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP2	342	Medium
org.apache.johnzon.jsonschema.generator.Schema.setOneOf(List) may expose internal representation by storing an externally mutable object into Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP2	358	Medium
org.apache.johnzon.jsonschema.generator.Schema.setProperties(Map) may expose internal representation by storing an externally mutable object into Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP2	166	Medium
org.apache.johnzon.jsonschema.generator.Schema.setRequired(List) may expose internal representation by storing an externally mutable object into Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP2	406	Medium

org.apache.johnzon.jsonschema.generator.SchemaProcessor

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jsonschema.generator.SchemaProcessor at new org.apache.johnzon.jsonschema.generator.SchemaProcessor() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	76	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.jsonschema.generator.SchemaProcessor.find(String, Annotation)	STYLE	REC_CATCH_EXCEPTION	290	Medium
Useless object stored in variable items of method org.apache.johnzon.jsonschema.generator.SchemaProcessor.fillSchema(Type, Schema, SchemaProcessor$Cache, SchemaProcessor$ReflectionValueExtractor, SchemaProcessor$Instance)	STYLE	UC_USELESS_OBJECT	139	Medium
Exception thrown in class org.apache.johnzon.jsonschema.generator.SchemaProcessor at new org.apache.johnzon.jsonschema.generator.SchemaProcessor() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	76	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.jsonschema.generator.SchemaProcessor.find(String, Annotation)	STYLE	REC_CATCH_EXCEPTION	290	Medium
Useless object stored in variable items of method org.apache.johnzon.jsonschema.generator.SchemaProcessor.fillSchema(Type, Schema, SchemaProcessor$Cache, SchemaProcessor$ReflectionValueExtractor, SchemaProcessor$Instance)	STYLE	UC_USELESS_OBJECT	139	Medium
Exception thrown in class org.apache.johnzon.jsonschema.generator.SchemaProcessor at new org.apache.johnzon.jsonschema.generator.SchemaProcessor() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	76	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.jsonschema.generator.SchemaProcessor.find(String, Annotation)	STYLE	REC_CATCH_EXCEPTION	290	Medium
Useless object stored in variable items of method org.apache.johnzon.jsonschema.generator.SchemaProcessor.fillSchema(Type, Schema, SchemaProcessor$Cache, SchemaProcessor$ReflectionValueExtractor, SchemaProcessor$Instance)	STYLE	UC_USELESS_OBJECT	139	Medium

org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getDefinitions() may expose internal representation by returning SchemaProcessor$InMemoryCache.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	540	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getSchemas() may expose internal representation by returning SchemaProcessor$InMemoryCache.schemas	MALICIOUS_CODE	EI_EXPOSE_REP	536	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getDefinitions() may expose internal representation by returning SchemaProcessor$InMemoryCache.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	540	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getSchemas() may expose internal representation by returning SchemaProcessor$InMemoryCache.schemas	MALICIOUS_CODE	EI_EXPOSE_REP	536	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getDefinitions() may expose internal representation by returning SchemaProcessor$InMemoryCache.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	540	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getSchemas() may expose internal representation by returning SchemaProcessor$InMemoryCache.schemas	MALICIOUS_CODE	EI_EXPOSE_REP	536	Medium

org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor

Bug	Category	Details	Line	Priority
Possible null pointer dereference of field in org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor.createDemoInstance(Object, Field)	CORRECTNESS	NP_NULL_ON_SOME_PATH	606	Medium
Possible null pointer dereference of field in org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor.createDemoInstance(Object, Field)	CORRECTNESS	NP_NULL_ON_SOME_PATH	606	Medium
Possible null pointer dereference of field in org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor.createDemoInstance(Object, Field)	CORRECTNESS	NP_NULL_ON_SOME_PATH	606	Medium

org.apache.johnzon.jsonschema.spi.ValidationContext

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.spi.ValidationContext.getPath() may expose internal representation by returning ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
new org.apache.johnzon.jsonschema.spi.ValidationContext(String[], JsonObject, Function) may expose internal representation by storing an externally mutable object into ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP2	35	Medium
org.apache.johnzon.jsonschema.spi.ValidationContext.getPath() may expose internal representation by returning ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
new org.apache.johnzon.jsonschema.spi.ValidationContext(String[], JsonObject, Function) may expose internal representation by storing an externally mutable object into ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP2	35	Medium
org.apache.johnzon.jsonschema.spi.ValidationContext.getPath() may expose internal representation by returning ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
new org.apache.johnzon.jsonschema.spi.ValidationContext(String[], JsonObject, Function) may expose internal representation by storing an externally mutable object into ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP2	35	Medium

org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl

Bug	Category	Details	Line	Priority
Test for floating point equality in org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl.isValid(double)	STYLE	FE_FLOATING_POINT_EQUALITY	51	High
Test for floating point equality in org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl.isValid(double)	STYLE	FE_FLOATING_POINT_EQUALITY	51	High
Test for floating point equality in org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl.isValid(double)	STYLE	FE_FLOATING_POINT_EQUALITY	51	High

org.apache.johnzon.maven.plugin.ExampleToModelMojo

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String): new java.io.FileReader(File)	I18N	DM_DEFAULT_ENCODING	106	High
org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String) may fail to clean up java.io.Reader	EXPERIMENTAL	OBL_UNSATISFIED_OBLIGATION	106	Medium
Exceptional return value of java.io.File.mkdirs() ignored in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generateFile(JsonReaderFactory, File)	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	346	Medium
Found reliance on default encoding in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String): new java.io.FileReader(File)	I18N	DM_DEFAULT_ENCODING	106	High
org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String) may fail to clean up java.io.Reader	EXPERIMENTAL	OBL_UNSATISFIED_OBLIGATION	106	Medium
Exceptional return value of java.io.File.mkdirs() ignored in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generateFile(JsonReaderFactory, File)	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	346	Medium
Found reliance on default encoding in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String): new java.io.FileReader(File)	I18N	DM_DEFAULT_ENCODING	106	High
org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String) may fail to clean up java.io.Reader	EXPERIMENTAL	OBL_UNSATISFIED_OBLIGATION	106	Medium
Exceptional return value of java.io.File.mkdirs() ignored in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generateFile(JsonReaderFactory, File)	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	346	Medium

org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo

Bug	Category	Details	Line	Priority
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo.dump(Map) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	122	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo.dump(Map) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	122	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo.dump(Map) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	122	Medium

org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1

Bug	Category	Details	Line	Priority
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1.visitFile(Path, BasicFileAttributes) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	84	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1.visitFile(Path, BasicFileAttributes) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	84	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1.visitFile(Path, BasicFileAttributes) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	84	Medium

org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo

Bug	Category	Details	Line	Priority
Possible null pointer dereference in org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo.execute() due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	95	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo.execute() due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	95	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo.execute() due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	95	Medium

org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper

Bug	Category	Details	Line	Priority
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.id	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	187	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.value	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	188	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.id	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	187	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.value	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	188	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.id	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	187	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.value	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	188	Medium

org.apache.johnzon.osgi.Activator

Bug	Category	Details	Line	Priority
Suspicious comparison of Boolean references in org.apache.johnzon.osgi.Activator.lambda$whenTrue$3(Boolean)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	141	Medium
Suspicious comparison of Boolean references in org.apache.johnzon.osgi.Activator.lambda$whenTrue$3(Boolean)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	141	Medium
Suspicious comparison of Boolean references in org.apache.johnzon.osgi.Activator.lambda$whenTrue$3(Boolean)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	141	Medium

org.apache.johnzon.jsonlogic.JohnzonJsonLogic

Bug	Category	Details	Line	Priority
Unread field: org.apache.johnzon.jsonlogic.JohnzonJsonLogic.cacheJsonMergePatches	PERFORMANCE	URF_UNREAD_FIELD	85	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.apply(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	113	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.applyStage(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	139	Medium
Unread field: org.apache.johnzon.jsonlogic.JohnzonJsonLogic.cacheJsonMergePatches	PERFORMANCE	URF_UNREAD_FIELD	85	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.apply(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	113	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.applyStage(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	139	Medium
Unread field: org.apache.johnzon.jsonlogic.JohnzonJsonLogic.cacheJsonMergePatches	PERFORMANCE	URF_UNREAD_FIELD	85	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.apply(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	113	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.applyStage(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	139	Medium

org.apache.johnzon.core.AbstractJsonFactory

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium

org.apache.johnzon.core.JsonArrayBuilderImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium

org.apache.johnzon.core.JsonBuilderFactoryImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium

org.apache.johnzon.core.JsonChars

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium

org.apache.johnzon.core.JsonGeneratorFactoryImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium

org.apache.johnzon.core.JsonGeneratorImpl

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High

org.apache.johnzon.core.JsonMergePatchImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium

org.apache.johnzon.core.JsonNumberImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium

org.apache.johnzon.core.JsonObjectBuilderImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium

org.apache.johnzon.core.JsonObjectImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium

org.apache.johnzon.core.JsonParserFactoryImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium

org.apache.johnzon.core.JsonPointerImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium

org.apache.johnzon.core.JsonProviderImpl

Bug	Category	Details	Line	Priority
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High

org.apache.johnzon.core.JsonReaderImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium

org.apache.johnzon.core.JsonStreamParserImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium

org.apache.johnzon.core.JsonStringImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium

org.apache.johnzon.core.RejectDuplicateKeysMode

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium

org.apache.johnzon.core.Snippet$Buffer$SnippetWriter

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High

org.apache.johnzon.mapper.JohnzonCores

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium

org.apache.johnzon.mapper.MapperBuilder

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium

org.apache.johnzon.mapper.MapperConfig

Bug	Category	Details	Line	Priority
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium

org.apache.johnzon.mapper.MappingGeneratorImpl

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High

org.apache.johnzon.mapper.MappingParserImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium

org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium

org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium

org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium

org.apache.johnzon.mapper.access.FieldAndMethodAccessMode

Bug	Category	Details	Line	Priority
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High

org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium

org.apache.johnzon.mapper.map.LazyConverterMap

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium

org.apache.johnzon.mapper.reflection.JohnzonParameterizedType

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium

org.apache.johnzon.jaxrs.DelegateProvider

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium

org.apache.johnzon.jaxrs.JohnzonMessageBodyReader

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium

org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium

org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High

org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider

Bug	Category	Details	Line	Priority
Inconsistent synchronization of org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider.throwNoContentExceptionOnEmptyStreams; locked 80% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	92	Medium
Inconsistent synchronization of org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider.throwNoContentExceptionOnEmptyStreams; locked 80% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	92	Medium
Inconsistent synchronization of org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider.throwNoContentExceptionOnEmptyStreams; locked 80% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	92	Medium

org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1 at new org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1(JsonbJaxrsProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	111	Medium
Exception thrown in class org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1 at new org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1(JsonbJaxrsProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	111	Medium
Exception thrown in class org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1 at new org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1(JsonbJaxrsProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	111	Medium

org.apache.johnzon.jsonb.JohnzonBuilder

Bug	Category	Details	Line	Priority
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.lambda$build$5(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	147	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toBool(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	377	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toInt(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	381	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.lambda$build$5(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	147	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toBool(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	377	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toInt(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	381	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.lambda$build$5(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	147	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toBool(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	377	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toInt(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	381	Medium

org.apache.johnzon.jsonb.JohnzonJsonb

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jsonb.JohnzonJsonb(Mapper, boolean, Consumer) may expose internal representation by storing an externally mutable object into JohnzonJsonb.delegate	MALICIOUS_CODE	EI_EXPOSE_REP2	67	Medium
new org.apache.johnzon.jsonb.JohnzonJsonb(Mapper, boolean, Consumer) may expose internal representation by storing an externally mutable object into JohnzonJsonb.delegate	MALICIOUS_CODE	EI_EXPOSE_REP2	67	Medium
new org.apache.johnzon.jsonb.JohnzonJsonb(Mapper, boolean, Consumer) may expose internal representation by storing an externally mutable object into JohnzonJsonb.delegate	MALICIOUS_CODE	EI_EXPOSE_REP2	67	Medium

org.apache.johnzon.jsonb.JsonbAccessMode

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jsonb.JsonbAccessMode(PropertyNamingStrategy, String, PropertyVisibilityStrategy, boolean, Map, JohnzonAdapterFactory, JsonProvider, Supplier, Supplier, AccessMode, boolean, boolean, boolean) may expose internal representation by storing an externally mutable object into JsonbAccessMode.defaultConverters	MALICIOUS_CODE	EI_EXPOSE_REP2	177	Medium
Class<?> is incompatible with expected argument type org.apache.johnzon.mapper.internal.AdapterKey in org.apache.johnzon.jsonb.JsonbAccessMode.findFactory(Class, Function[])	CORRECTNESS	GC_UNRELATED_TYPES	269	High
new org.apache.johnzon.jsonb.JsonbAccessMode(PropertyNamingStrategy, String, PropertyVisibilityStrategy, boolean, Map, JohnzonAdapterFactory, JsonProvider, Supplier, Supplier, AccessMode, boolean, boolean, boolean) may expose internal representation by storing an externally mutable object into JsonbAccessMode.defaultConverters	MALICIOUS_CODE	EI_EXPOSE_REP2	177	Medium
Class<?> is incompatible with expected argument type org.apache.johnzon.mapper.internal.AdapterKey in org.apache.johnzon.jsonb.JsonbAccessMode.findFactory(Class, Function[])	CORRECTNESS	GC_UNRELATED_TYPES	269	High
new org.apache.johnzon.jsonb.JsonbAccessMode(PropertyNamingStrategy, String, PropertyVisibilityStrategy, boolean, Map, JohnzonAdapterFactory, JsonProvider, Supplier, Supplier, AccessMode, boolean, boolean, boolean) may expose internal representation by storing an externally mutable object into JsonbAccessMode.defaultConverters	MALICIOUS_CODE	EI_EXPOSE_REP2	177	Medium
Class<?> is incompatible with expected argument type org.apache.johnzon.mapper.internal.AdapterKey in org.apache.johnzon.jsonb.JsonbAccessMode.findFactory(Class, Function[])	CORRECTNESS	GC_UNRELATED_TYPES	269	High

org.apache.johnzon.jsonb.JsonbAccessMode$2

Bug	Category	Details	Line	Priority
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$2.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	326	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$2.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	326	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$2.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	326	High

org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters(JsonbAccessMode, AccessMode$DecoratedType) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1166	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters(JsonbAccessMode, AccessMode$DecoratedType) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1166	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters(JsonbAccessMode, AccessMode$DecoratedType) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1166	Medium

org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1

Bug	Category	Details	Line	Priority
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1144	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1144	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1144	High

org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters(JsonbAccessMode, AccessMode$DecoratedType, Types) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1225	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters(JsonbAccessMode, AccessMode$DecoratedType, Types) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1225	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters(JsonbAccessMode, AccessMode$DecoratedType, Types) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1225	Medium

org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory

Bug	Category	Details	Line	Priority
Public method org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory.create(Class) uses reflection to create a class it gets in its parameter which could increase the accessibility of any class	MALICIOUS_CODE	REFLC_REFLECTION_MAY_INCREASE_ACCESSIBILITY_OF_CLASS	27	Medium
Public method org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory.create(Class) uses reflection to create a class it gets in its parameter which could increase the accessibility of any class	MALICIOUS_CODE	REFLC_REFLECTION_MAY_INCREASE_ACCESSIBILITY_OF_CLASS	27	Medium
Public method org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory.create(Class) uses reflection to create a class it gets in its parameter which could increase the accessibility of any class	MALICIOUS_CODE	REFLC_REFLECTION_MAY_INCREASE_ACCESSIBILITY_OF_CLASS	27	Medium

org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getAliases() may expose internal representation by returning JsonbPolymorphismTypeInfo.aliases	MALICIOUS_CODE	EI_EXPOSE_REP	64	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getParents() may expose internal representation by returning JsonbPolymorphismTypeInfo.parents	MALICIOUS_CODE	EI_EXPOSE_REP	72	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getAliases() may expose internal representation by returning JsonbPolymorphismTypeInfo.aliases	MALICIOUS_CODE	EI_EXPOSE_REP	64	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getParents() may expose internal representation by returning JsonbPolymorphismTypeInfo.parents	MALICIOUS_CODE	EI_EXPOSE_REP	72	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getAliases() may expose internal representation by returning JsonbPolymorphismTypeInfo.aliases	MALICIOUS_CODE	EI_EXPOSE_REP	64	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getParents() may expose internal representation by returning JsonbPolymorphismTypeInfo.parents	MALICIOUS_CODE	EI_EXPOSE_REP	72	Medium

org.apache.johnzon.websocket.jsonb.JsonbTextDecoder

Bug	Category	Details	Line	Priority
Field JsonbTextDecoder.type masks field in superclass org.apache.johnzon.websocket.internal.TypeAwareDecoder	CORRECTNESS	MF_CLASS_MASKS_FIELD		Medium
Unwritten public or protected field: org.apache.johnzon.websocket.jsonb.JsonbTextDecoder.type	STYLE	UWF_UNWRITTEN_PUBLIC_OR_PROTECTED_FIELD	52	Medium
Field JsonbTextDecoder.type masks field in superclass org.apache.johnzon.websocket.internal.TypeAwareDecoder	CORRECTNESS	MF_CLASS_MASKS_FIELD		Medium
Unwritten public or protected field: org.apache.johnzon.websocket.jsonb.JsonbTextDecoder.type	STYLE	UWF_UNWRITTEN_PUBLIC_OR_PROTECTED_FIELD	52	Medium
Field JsonbTextDecoder.type masks field in superclass org.apache.johnzon.websocket.internal.TypeAwareDecoder	CORRECTNESS	MF_CLASS_MASKS_FIELD		Medium
Unwritten public or protected field: org.apache.johnzon.websocket.jsonb.JsonbTextDecoder.type	STYLE	UWF_UNWRITTEN_PUBLIC_OR_PROTECTED_FIELD	52	Medium

org.apache.johnzon.websocket.jsr.JsrObjectDecoder

Bug	Category	Details	Priority
Unused field: org.apache.johnzon.websocket.jsr.JsrObjectDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrObjectDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrObjectDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium

org.apache.johnzon.websocket.jsr.JsrStructureDecoder

Bug	Category	Details	Priority
Unused field: org.apache.johnzon.websocket.jsr.JsrStructureDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrStructureDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrStructureDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium

org.apache.johnzon.websocket.mapper.JohnzonTextDecoder

Bug	Category	Details	Line	Priority
new org.apache.johnzon.websocket.mapper.JohnzonTextDecoder(Mapper, Type) may expose internal representation by storing an externally mutable object into JohnzonTextDecoder.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	50	Medium
new org.apache.johnzon.websocket.mapper.JohnzonTextDecoder(Mapper, Type) may expose internal representation by storing an externally mutable object into JohnzonTextDecoder.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	50	Medium
new org.apache.johnzon.websocket.mapper.JohnzonTextDecoder(Mapper, Type) may expose internal representation by storing an externally mutable object into JohnzonTextDecoder.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	50	Medium

org.apache.johnzon.jsonschema.JsonSchemaValidator

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.JsonSchemaValidator.apply(JsonValue) may expose internal representation by returning JsonSchemaValidator.SUCCESS	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
org.apache.johnzon.jsonschema.JsonSchemaValidator.apply(JsonValue) may expose internal representation by returning JsonSchemaValidator.SUCCESS	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
org.apache.johnzon.jsonschema.JsonSchemaValidator.apply(JsonValue) may expose internal representation by returning JsonSchemaValidator.SUCCESS	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium

org.apache.johnzon.jsonschema.JsonSchemaValidatorFactory

Bug	Category	Details	Line	Priority
Shared primitive variable "failFast" in one thread may not yield the value of the most recent write from another thread	MT_CORRECTNESS	AT_STALE_THREAD_WRITE_OF_PRIMITIVE	109	Medium
Shared primitive variable "failFast" in one thread may not yield the value of the most recent write from another thread	MT_CORRECTNESS	AT_STALE_THREAD_WRITE_OF_PRIMITIVE	109	Medium
Shared primitive variable "failFast" in one thread may not yield the value of the most recent write from another thread	MT_CORRECTNESS	AT_STALE_THREAD_WRITE_OF_PRIMITIVE	109	Medium

org.apache.johnzon.jsonschema.ValidationResult

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.ValidationResult.getErrors() may expose internal representation by returning ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP	39	Medium
org.apache.johnzon.jsonschema.ValidationResult.setErrors(Collection) may expose internal representation by storing an externally mutable object into ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP2	43	Medium
org.apache.johnzon.jsonschema.ValidationResult.getErrors() may expose internal representation by returning ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP	39	Medium
org.apache.johnzon.jsonschema.ValidationResult.setErrors(Collection) may expose internal representation by storing an externally mutable object into ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP2	43	Medium
org.apache.johnzon.jsonschema.ValidationResult.getErrors() may expose internal representation by returning ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP	39	Medium
org.apache.johnzon.jsonschema.ValidationResult.setErrors(Collection) may expose internal representation by storing an externally mutable object into ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP2	43	Medium

org.apache.johnzon.jsonschema.generator.PojoGenerator

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.PojoGenerator.generate() may expose internal representation by returning PojoGenerator.nested	MALICIOUS_CODE	EI_EXPOSE_REP	69	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator.generate() may expose internal representation by returning PojoGenerator.nested	MALICIOUS_CODE	EI_EXPOSE_REP	69	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator.generate() may expose internal representation by returning PojoGenerator.nested	MALICIOUS_CODE	EI_EXPOSE_REP	69	Medium

org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getAttributes() may expose internal representation by returning PojoGenerator$Ref.attributes	MALICIOUS_CODE	EI_EXPOSE_REP	775	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getImports() may expose internal representation by returning PojoGenerator$Ref.imports	MALICIOUS_CODE	EI_EXPOSE_REP	771	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getNested() may expose internal representation by returning PojoGenerator$Ref.nested	MALICIOUS_CODE	EI_EXPOSE_REP	779	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getAttributes() may expose internal representation by returning PojoGenerator$Ref.attributes	MALICIOUS_CODE	EI_EXPOSE_REP	775	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getImports() may expose internal representation by returning PojoGenerator$Ref.imports	MALICIOUS_CODE	EI_EXPOSE_REP	771	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getNested() may expose internal representation by returning PojoGenerator$Ref.nested	MALICIOUS_CODE	EI_EXPOSE_REP	779	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getAttributes() may expose internal representation by returning PojoGenerator$Ref.attributes	MALICIOUS_CODE	EI_EXPOSE_REP	775	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getImports() may expose internal representation by returning PojoGenerator$Ref.imports	MALICIOUS_CODE	EI_EXPOSE_REP	771	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getNested() may expose internal representation by returning PojoGenerator$Ref.nested	MALICIOUS_CODE	EI_EXPOSE_REP	779	Medium

org.apache.johnzon.jsonschema.generator.Schema

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.Schema.getAllOf() may expose internal representation by returning Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP	178	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAnyOf() may expose internal representation by returning Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP	186	Medium
org.apache.johnzon.jsonschema.generator.Schema.getDefinitions() may expose internal representation by returning Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	146	Medium
org.apache.johnzon.jsonschema.generator.Schema.getEnumeration() may expose internal representation by returning Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP	218	Medium
org.apache.johnzon.jsonschema.generator.Schema.getItems() may expose internal representation by returning Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP	258	Medium
org.apache.johnzon.jsonschema.generator.Schema.getNot() may expose internal representation by returning Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP	338	Medium
org.apache.johnzon.jsonschema.generator.Schema.getOneOf() may expose internal representation by returning Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP	354	Medium
org.apache.johnzon.jsonschema.generator.Schema.getProperties() may expose internal representation by returning Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP	162	Medium
org.apache.johnzon.jsonschema.generator.Schema.getRequired() may expose internal representation by returning Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP	402	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAllOf(List) may expose internal representation by storing an externally mutable object into Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP2	182	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAnyOf(List) may expose internal representation by storing an externally mutable object into Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP2	190	Medium
org.apache.johnzon.jsonschema.generator.Schema.setDefinitions(Map) may expose internal representation by storing an externally mutable object into Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP2	150	Medium
org.apache.johnzon.jsonschema.generator.Schema.setEnumeration(List) may expose internal representation by storing an externally mutable object into Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP2	222	Medium
org.apache.johnzon.jsonschema.generator.Schema.setItems(Schema) may expose internal representation by storing an externally mutable object into Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP2	262	Medium
org.apache.johnzon.jsonschema.generator.Schema.setNot(Schema) may expose internal representation by storing an externally mutable object into Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP2	342	Medium
org.apache.johnzon.jsonschema.generator.Schema.setOneOf(List) may expose internal representation by storing an externally mutable object into Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP2	358	Medium
org.apache.johnzon.jsonschema.generator.Schema.setProperties(Map) may expose internal representation by storing an externally mutable object into Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP2	166	Medium
org.apache.johnzon.jsonschema.generator.Schema.setRequired(List) may expose internal representation by storing an externally mutable object into Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP2	406	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAllOf() may expose internal representation by returning Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP	178	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAnyOf() may expose internal representation by returning Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP	186	Medium
org.apache.johnzon.jsonschema.generator.Schema.getDefinitions() may expose internal representation by returning Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	146	Medium
org.apache.johnzon.jsonschema.generator.Schema.getEnumeration() may expose internal representation by returning Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP	218	Medium
org.apache.johnzon.jsonschema.generator.Schema.getItems() may expose internal representation by returning Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP	258	Medium
org.apache.johnzon.jsonschema.generator.Schema.getNot() may expose internal representation by returning Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP	338	Medium
org.apache.johnzon.jsonschema.generator.Schema.getOneOf() may expose internal representation by returning Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP	354	Medium
org.apache.johnzon.jsonschema.generator.Schema.getProperties() may expose internal representation by returning Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP	162	Medium
org.apache.johnzon.jsonschema.generator.Schema.getRequired() may expose internal representation by returning Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP	402	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAllOf(List) may expose internal representation by storing an externally mutable object into Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP2	182	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAnyOf(List) may expose internal representation by storing an externally mutable object into Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP2	190	Medium
org.apache.johnzon.jsonschema.generator.Schema.setDefinitions(Map) may expose internal representation by storing an externally mutable object into Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP2	150	Medium
org.apache.johnzon.jsonschema.generator.Schema.setEnumeration(List) may expose internal representation by storing an externally mutable object into Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP2	222	Medium
org.apache.johnzon.jsonschema.generator.Schema.setItems(Schema) may expose internal representation by storing an externally mutable object into Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP2	262	Medium
org.apache.johnzon.jsonschema.generator.Schema.setNot(Schema) may expose internal representation by storing an externally mutable object into Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP2	342	Medium
org.apache.johnzon.jsonschema.generator.Schema.setOneOf(List) may expose internal representation by storing an externally mutable object into Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP2	358	Medium
org.apache.johnzon.jsonschema.generator.Schema.setProperties(Map) may expose internal representation by storing an externally mutable object into Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP2	166	Medium
org.apache.johnzon.jsonschema.generator.Schema.setRequired(List) may expose internal representation by storing an externally mutable object into Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP2	406	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAllOf() may expose internal representation by returning Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP	178	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAnyOf() may expose internal representation by returning Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP	186	Medium
org.apache.johnzon.jsonschema.generator.Schema.getDefinitions() may expose internal representation by returning Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	146	Medium
org.apache.johnzon.jsonschema.generator.Schema.getEnumeration() may expose internal representation by returning Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP	218	Medium
org.apache.johnzon.jsonschema.generator.Schema.getItems() may expose internal representation by returning Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP	258	Medium
org.apache.johnzon.jsonschema.generator.Schema.getNot() may expose internal representation by returning Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP	338	Medium
org.apache.johnzon.jsonschema.generator.Schema.getOneOf() may expose internal representation by returning Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP	354	Medium
org.apache.johnzon.jsonschema.generator.Schema.getProperties() may expose internal representation by returning Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP	162	Medium
org.apache.johnzon.jsonschema.generator.Schema.getRequired() may expose internal representation by returning Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP	402	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAllOf(List) may expose internal representation by storing an externally mutable object into Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP2	182	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAnyOf(List) may expose internal representation by storing an externally mutable object into Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP2	190	Medium
org.apache.johnzon.jsonschema.generator.Schema.setDefinitions(Map) may expose internal representation by storing an externally mutable object into Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP2	150	Medium
org.apache.johnzon.jsonschema.generator.Schema.setEnumeration(List) may expose internal representation by storing an externally mutable object into Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP2	222	Medium
org.apache.johnzon.jsonschema.generator.Schema.setItems(Schema) may expose internal representation by storing an externally mutable object into Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP2	262	Medium
org.apache.johnzon.jsonschema.generator.Schema.setNot(Schema) may expose internal representation by storing an externally mutable object into Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP2	342	Medium
org.apache.johnzon.jsonschema.generator.Schema.setOneOf(List) may expose internal representation by storing an externally mutable object into Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP2	358	Medium
org.apache.johnzon.jsonschema.generator.Schema.setProperties(Map) may expose internal representation by storing an externally mutable object into Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP2	166	Medium
org.apache.johnzon.jsonschema.generator.Schema.setRequired(List) may expose internal representation by storing an externally mutable object into Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP2	406	Medium

org.apache.johnzon.jsonschema.generator.SchemaProcessor

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jsonschema.generator.SchemaProcessor at new org.apache.johnzon.jsonschema.generator.SchemaProcessor() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	76	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.jsonschema.generator.SchemaProcessor.find(String, Annotation)	STYLE	REC_CATCH_EXCEPTION	290	Medium
Useless object stored in variable items of method org.apache.johnzon.jsonschema.generator.SchemaProcessor.fillSchema(Type, Schema, SchemaProcessor$Cache, SchemaProcessor$ReflectionValueExtractor, SchemaProcessor$Instance)	STYLE	UC_USELESS_OBJECT	139	Medium
Exception thrown in class org.apache.johnzon.jsonschema.generator.SchemaProcessor at new org.apache.johnzon.jsonschema.generator.SchemaProcessor() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	76	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.jsonschema.generator.SchemaProcessor.find(String, Annotation)	STYLE	REC_CATCH_EXCEPTION	290	Medium
Useless object stored in variable items of method org.apache.johnzon.jsonschema.generator.SchemaProcessor.fillSchema(Type, Schema, SchemaProcessor$Cache, SchemaProcessor$ReflectionValueExtractor, SchemaProcessor$Instance)	STYLE	UC_USELESS_OBJECT	139	Medium
Exception thrown in class org.apache.johnzon.jsonschema.generator.SchemaProcessor at new org.apache.johnzon.jsonschema.generator.SchemaProcessor() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	76	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.jsonschema.generator.SchemaProcessor.find(String, Annotation)	STYLE	REC_CATCH_EXCEPTION	290	Medium
Useless object stored in variable items of method org.apache.johnzon.jsonschema.generator.SchemaProcessor.fillSchema(Type, Schema, SchemaProcessor$Cache, SchemaProcessor$ReflectionValueExtractor, SchemaProcessor$Instance)	STYLE	UC_USELESS_OBJECT	139	Medium

org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getDefinitions() may expose internal representation by returning SchemaProcessor$InMemoryCache.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	540	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getSchemas() may expose internal representation by returning SchemaProcessor$InMemoryCache.schemas	MALICIOUS_CODE	EI_EXPOSE_REP	536	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getDefinitions() may expose internal representation by returning SchemaProcessor$InMemoryCache.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	540	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getSchemas() may expose internal representation by returning SchemaProcessor$InMemoryCache.schemas	MALICIOUS_CODE	EI_EXPOSE_REP	536	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getDefinitions() may expose internal representation by returning SchemaProcessor$InMemoryCache.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	540	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getSchemas() may expose internal representation by returning SchemaProcessor$InMemoryCache.schemas	MALICIOUS_CODE	EI_EXPOSE_REP	536	Medium

org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor

Bug	Category	Details	Line	Priority
Possible null pointer dereference of field in org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor.createDemoInstance(Object, Field)	CORRECTNESS	NP_NULL_ON_SOME_PATH	606	Medium
Possible null pointer dereference of field in org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor.createDemoInstance(Object, Field)	CORRECTNESS	NP_NULL_ON_SOME_PATH	606	Medium
Possible null pointer dereference of field in org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor.createDemoInstance(Object, Field)	CORRECTNESS	NP_NULL_ON_SOME_PATH	606	Medium

org.apache.johnzon.jsonschema.spi.ValidationContext

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.spi.ValidationContext.getPath() may expose internal representation by returning ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
new org.apache.johnzon.jsonschema.spi.ValidationContext(String[], JsonObject, Function) may expose internal representation by storing an externally mutable object into ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP2	35	Medium
org.apache.johnzon.jsonschema.spi.ValidationContext.getPath() may expose internal representation by returning ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
new org.apache.johnzon.jsonschema.spi.ValidationContext(String[], JsonObject, Function) may expose internal representation by storing an externally mutable object into ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP2	35	Medium
org.apache.johnzon.jsonschema.spi.ValidationContext.getPath() may expose internal representation by returning ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
new org.apache.johnzon.jsonschema.spi.ValidationContext(String[], JsonObject, Function) may expose internal representation by storing an externally mutable object into ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP2	35	Medium

org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl

Bug	Category	Details	Line	Priority
Test for floating point equality in org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl.isValid(double)	STYLE	FE_FLOATING_POINT_EQUALITY	51	High
Test for floating point equality in org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl.isValid(double)	STYLE	FE_FLOATING_POINT_EQUALITY	51	High
Test for floating point equality in org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl.isValid(double)	STYLE	FE_FLOATING_POINT_EQUALITY	51	High

org.apache.johnzon.maven.plugin.ExampleToModelMojo

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String): new java.io.FileReader(File)	I18N	DM_DEFAULT_ENCODING	106	High
org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String) may fail to clean up java.io.Reader	EXPERIMENTAL	OBL_UNSATISFIED_OBLIGATION	106	Medium
Exceptional return value of java.io.File.mkdirs() ignored in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generateFile(JsonReaderFactory, File)	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	346	Medium
Found reliance on default encoding in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String): new java.io.FileReader(File)	I18N	DM_DEFAULT_ENCODING	106	High
org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String) may fail to clean up java.io.Reader	EXPERIMENTAL	OBL_UNSATISFIED_OBLIGATION	106	Medium
Exceptional return value of java.io.File.mkdirs() ignored in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generateFile(JsonReaderFactory, File)	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	346	Medium
Found reliance on default encoding in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String): new java.io.FileReader(File)	I18N	DM_DEFAULT_ENCODING	106	High
org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String) may fail to clean up java.io.Reader	EXPERIMENTAL	OBL_UNSATISFIED_OBLIGATION	106	Medium
Exceptional return value of java.io.File.mkdirs() ignored in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generateFile(JsonReaderFactory, File)	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	346	Medium

org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo

Bug	Category	Details	Line	Priority
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo.dump(Map) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	122	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo.dump(Map) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	122	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo.dump(Map) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	122	Medium

org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1

Bug	Category	Details	Line	Priority
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1.visitFile(Path, BasicFileAttributes) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	84	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1.visitFile(Path, BasicFileAttributes) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	84	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1.visitFile(Path, BasicFileAttributes) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	84	Medium

org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo

Bug	Category	Details	Line	Priority
Possible null pointer dereference in org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo.execute() due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	95	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo.execute() due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	95	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo.execute() due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	95	Medium

org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper

Bug	Category	Details	Line	Priority
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.id	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	187	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.value	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	188	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.id	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	187	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.value	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	188	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.id	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	187	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.value	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	188	Medium

org.apache.johnzon.osgi.Activator

Bug	Category	Details	Line	Priority
Suspicious comparison of Boolean references in org.apache.johnzon.osgi.Activator.lambda$whenTrue$3(Boolean)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	141	Medium
Suspicious comparison of Boolean references in org.apache.johnzon.osgi.Activator.lambda$whenTrue$3(Boolean)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	141	Medium
Suspicious comparison of Boolean references in org.apache.johnzon.osgi.Activator.lambda$whenTrue$3(Boolean)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	141	Medium

org.apache.johnzon.jsonlogic.JohnzonJsonLogic

Bug	Category	Details	Line	Priority
Unread field: org.apache.johnzon.jsonlogic.JohnzonJsonLogic.cacheJsonMergePatches	PERFORMANCE	URF_UNREAD_FIELD	85	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.apply(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	113	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.applyStage(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	139	Medium
Unread field: org.apache.johnzon.jsonlogic.JohnzonJsonLogic.cacheJsonMergePatches	PERFORMANCE	URF_UNREAD_FIELD	85	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.apply(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	113	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.applyStage(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	139	Medium
Unread field: org.apache.johnzon.jsonlogic.JohnzonJsonLogic.cacheJsonMergePatches	PERFORMANCE	URF_UNREAD_FIELD	85	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.apply(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	113	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.applyStage(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	139	Medium

org.apache.johnzon.core.AbstractJsonFactory

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium
new org.apache.johnzon.core.AbstractJsonFactory(Map, Collection, Collection) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	45	Medium

org.apache.johnzon.core.JsonArrayBuilderImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium
Exception thrown in class org.apache.johnzon.core.JsonArrayBuilderImpl at new org.apache.johnzon.core.JsonArrayBuilderImpl(Collection, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	65	Medium

org.apache.johnzon.core.JsonBuilderFactoryImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium
new org.apache.johnzon.core.JsonBuilderFactoryImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	56	Medium

org.apache.johnzon.core.JsonChars

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium
org.apache.johnzon.core.JsonChars.EVT_MAP should be moved out of an interface and made package protected	MALICIOUS_CODE	MS_OOI_PKGPROTECT	80	Medium

org.apache.johnzon.core.JsonGeneratorFactoryImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Exception thrown in class org.apache.johnzon.core.JsonGeneratorFactoryImpl at new org.apache.johnzon.core.JsonGeneratorFactoryImpl(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	66	Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field buffer	BAD_PRACTICE	SE_BAD_FIELD		Medium
Class org.apache.johnzon.core.JsonGeneratorFactoryImpl defines non-transient non-serializable instance field customBuffer	BAD_PRACTICE	SE_BAD_FIELD		Medium

org.apache.johnzon.core.JsonGeneratorImpl

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High
Load of known null value in org.apache.johnzon.core.JsonGeneratorImpl.close()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	457	Medium
org.apache.johnzon.core.JsonGeneratorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	43	Medium
Useless condition: it's known that c < 128 at this point	STYLE	UC_USELESS_CONDITION	540	High
Useless condition: it's known that c < 8192 (0x2000) at this point	STYLE	UC_USELESS_CONDITION	540	High

org.apache.johnzon.core.JsonMergePatchImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium
new org.apache.johnzon.core.JsonMergePatchImpl(JsonValue, BufferStrategy$BufferProvider, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonMergePatchImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	40	Medium

org.apache.johnzon.core.JsonNumberImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium
org.apache.johnzon.core.JsonNumberImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29	Medium

org.apache.johnzon.core.JsonObjectBuilderImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium
Exception thrown in class org.apache.johnzon.core.JsonObjectBuilderImpl at new org.apache.johnzon.core.JsonObjectBuilderImpl(Map, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	67	Medium

org.apache.johnzon.core.JsonObjectImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium
org.apache.johnzon.core.JsonObjectImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	160	Medium
org.apache.johnzon.core.JsonObjectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35	Medium

org.apache.johnzon.core.JsonParserFactoryImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium
Exception thrown in class org.apache.johnzon.core.JsonParserFactoryImpl at new org.apache.johnzon.core.JsonParserFactoryImpl(Map, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	64	Medium

org.apache.johnzon.core.JsonPointerImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium
Exception thrown in class org.apache.johnzon.core.JsonPointerImpl at new org.apache.johnzon.core.JsonPointerImpl(JsonProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	55	Medium

org.apache.johnzon.core.JsonProviderImpl

Bug	Category	Details	Line	Priority
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field bufferProvider	BAD_PRACTICE	SE_BAD_FIELD		High
Class org.apache.johnzon.core.JsonProviderImpl defines non-transient non-serializable instance field builderFactory	BAD_PRACTICE	SE_BAD_FIELD		High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.bufferProvider	BAD_PRACTICE	SE_BAD_FIELD_STORE	56	High
org.apache.johnzon.core.JsonProviderImpl$Cached stored into non-transient field JsonProviderImpl.builderFactory	BAD_PRACTICE	SE_BAD_FIELD_STORE	64	High

org.apache.johnzon.core.JsonReaderImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium
new org.apache.johnzon.core.JsonReaderImpl(JsonParser, boolean, BufferStrategy$BufferProvider, RejectDuplicateKeysMode, JsonProviderImpl) may expose internal representation by storing an externally mutable object into JsonReaderImpl.provider	MALICIOUS_CODE	EI_EXPOSE_REP2	60	Medium

org.apache.johnzon.core.JsonStreamParserImpl

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	137	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Reader, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	167	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(InputStream, Charset, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	145	Medium
Exception thrown in class org.apache.johnzon.core.JsonStreamParserImpl at new org.apache.johnzon.core.JsonStreamParserImpl(Reader, int, BufferStrategy$BufferProvider, BufferStrategy$BufferProvider, boolean, JsonProviderImpl) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	151	Medium

org.apache.johnzon.core.JsonStringImpl

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium
org.apache.johnzon.core.JsonStringImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27	Medium

org.apache.johnzon.core.RejectDuplicateKeysMode

Bug	Category	Details	Line	Priority
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium
org.apache.johnzon.core.RejectDuplicateKeysMode.put() may expose internal representation by returning RejectDuplicateKeysMode.put	MALICIOUS_CODE	EI_EXPOSE_REP	70	Medium

org.apache.johnzon.core.Snippet$Buffer$SnippetWriter

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High
Found reliance on default encoding in org.apache.johnzon.core.Snippet$Buffer$SnippetWriter.get(): java.io.ByteArrayOutputStream.toString()	I18N	DM_DEFAULT_ENCODING	314	High

org.apache.johnzon.mapper.JohnzonCores

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.mapper.JohnzonCores.<static initializer for JohnzonCores>()	STYLE	REC_CATCH_EXCEPTION	44	Medium

org.apache.johnzon.mapper.MapperBuilder

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium
org.apache.johnzon.mapper.MapperBuilder.getAdapters() may expose internal representation by returning MapperBuilder.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	255	Medium
org.apache.johnzon.mapper.MapperBuilder.setInterfaceImplementationMapping(Map) may expose internal representation by storing an externally mutable object into MapperBuilder.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	289	Medium

org.apache.johnzon.mapper.MapperConfig

Bug	Category	Details	Line	Priority
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium
Class org.apache.johnzon.mapper.MapperConfig implements Cloneable but does not define or use clone method	BAD_PRACTICE	CN_IDIOM	51	Medium
org.apache.johnzon.mapper.MapperConfig.getAdapters() may expose internal representation by returning MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP	450	Medium
org.apache.johnzon.mapper.MapperConfig.getInterfaceImplementationMapping() may expose internal representation by returning MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP	260	Medium
org.apache.johnzon.mapper.MapperConfig.getNoGeneratorAdapterTypes() may expose internal representation by returning MapperConfig.noGeneratorAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	224	Medium
org.apache.johnzon.mapper.MapperConfig.getNoParserAdapterTypes() may expose internal representation by returning MapperConfig.noParserAdapterTypes	MALICIOUS_CODE	EI_EXPOSE_REP	220	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterReaders() may expose internal representation by returning MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP	462	Medium
org.apache.johnzon.mapper.MapperConfig.getObjectConverterWriters() may expose internal representation by returning MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP	458	Medium
org.apache.johnzon.mapper.MapperConfig.getReverseAdapters() may expose internal representation by returning MapperConfig.reverseAdapters	MALICIOUS_CODE	EI_EXPOSE_REP	454	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.adapters	MALICIOUS_CODE	EI_EXPOSE_REP2	192	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.interfaceImplementationMapping	MALICIOUS_CODE	EI_EXPOSE_REP2	200	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterReaders	MALICIOUS_CODE	EI_EXPOSE_REP2	170	Medium
new org.apache.johnzon.mapper.MapperConfig(LazyConverterMap, Map, Map, int, boolean, boolean, boolean, boolean, boolean, boolean, AccessMode, Charset, Comparator, boolean, SerializeValueFilter, boolean, Boolean, Map, boolean, boolean, int, boolean, Function, Function, String, Predicate, Predicate, Function, SnippetFactory, Function) may expose internal representation by storing an externally mutable object into MapperConfig.objectConverterWriters	MALICIOUS_CODE	EI_EXPOSE_REP2	169	Medium

org.apache.johnzon.mapper.MappingGeneratorImpl

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High
Load of known null value in org.apache.johnzon.mapper.MappingGeneratorImpl.writeValue(Class, boolean, boolean, boolean, boolean, boolean, Adapter, String, Object, ObjectConverter$Writer, Collection, JsonPointerTracker, JsonGenerator)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	483	Medium
Useless condition: it's known that writeBody == true at this point	STYLE	UC_USELESS_CONDITION	170	High

org.apache.johnzon.mapper.MappingParserImpl

Bug	Category	Details	Line	Priority
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium
new org.apache.johnzon.mapper.MappingParserImpl(MapperConfig, Mappings, JsonReader, Map) may expose internal representation by storing an externally mutable object into MappingParserImpl.mappings	MALICIOUS_CODE	EI_EXPOSE_REP2	91	Medium
Return value of putIfAbsent is ignored, but method is reused in org.apache.johnzon.mapper.MappingParserImpl.convertTo(Type, String)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1178	High
Return value of putIfAbsent is ignored, but adapterKey is reused in org.apache.johnzon.mapper.MappingParserImpl.getAdapterKey(Adapter)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	618	Medium

org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium
Exception thrown in class org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter at new org.apache.johnzon.mapper.Mappings$MapUnwrapperWriter(Map, String[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	840	Medium

org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium
org.apache.johnzon.mapper.access.BaseAccessMode$ConfiguredFieldFilteringStrategy.getFieldsToRemove() may expose internal representation by returning BaseAccessMode$ConfiguredFieldFilteringStrategy.fieldsToRemove	MALICIOUS_CODE	EI_EXPOSE_REP	357	Medium

org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium
org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType.getField() may expose internal representation by returning FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP	126	Medium
new org.apache.johnzon.mapper.access.FieldAccessMode$FieldDecoratedType(Field, Type) may expose internal representation by storing an externally mutable object into FieldAccessMode$FieldDecoratedType.field	MALICIOUS_CODE	EI_EXPOSE_REP2	108	Medium

org.apache.johnzon.mapper.access.FieldAndMethodAccessMode

Bug	Category	Details	Line	Priority
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High
Useless condition: it's known that record == false at this point	STYLE	UC_USELESS_CONDITION	111	High

org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium
org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType.getMethod() may expose internal representation by returning MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP	153	Medium
new org.apache.johnzon.mapper.access.MethodAccessMode$MethodDecoratedType(Method, Type) may expose internal representation by storing an externally mutable object into MethodAccessMode$MethodDecoratedType.method	MALICIOUS_CODE	EI_EXPOSE_REP2	135	Medium

org.apache.johnzon.mapper.map.LazyConverterMap

Bug	Category	Details	Line	Priority
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium
org.apache.johnzon.mapper.map.LazyConverterMap doesn't override java.util.concurrent.ConcurrentHashMap.equals(Object)	STYLE	EQ_DOESNT_OVERRIDE_EQUALS	1	Medium
Class org.apache.johnzon.mapper.map.LazyConverterMap defines non-transient non-serializable instance field dateTimeFormatter	BAD_PRACTICE	SE_BAD_FIELD		Medium

org.apache.johnzon.mapper.reflection.JohnzonParameterizedType

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium
Exception thrown in class org.apache.johnzon.mapper.reflection.JohnzonParameterizedType at new org.apache.johnzon.mapper.reflection.JohnzonParameterizedType(Type, Type[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	31	Medium

org.apache.johnzon.jaxrs.DelegateProvider

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium
Exception thrown in class org.apache.johnzon.jaxrs.DelegateProvider at new org.apache.johnzon.jaxrs.DelegateProvider(MessageBodyReader, MessageBodyWriter) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	38	Medium

org.apache.johnzon.jaxrs.JohnzonMessageBodyReader

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyReader(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyReader.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	53	Medium

org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium
new org.apache.johnzon.jaxrs.JohnzonMessageBodyWriter(Mapper, Collection) may expose internal representation by storing an externally mutable object into JohnzonMessageBodyWriter.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	54	Medium

org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High
Found reliance on default encoding in org.apache.johnzon.jaxrs.WadlDocumentMessageBodyWriter.writeTo(Document, Class, Type, Annotation[], MediaType, MultivaluedMap, OutputStream): String.getBytes()	I18N	DM_DEFAULT_ENCODING	62	High

org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider

Bug	Category	Details	Line	Priority
Inconsistent synchronization of org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider.throwNoContentExceptionOnEmptyStreams; locked 80% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	92	Medium
Inconsistent synchronization of org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider.throwNoContentExceptionOnEmptyStreams; locked 80% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	92	Medium
Inconsistent synchronization of org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider.throwNoContentExceptionOnEmptyStreams; locked 80% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	92	Medium

org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1 at new org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1(JsonbJaxrsProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	111	Medium
Exception thrown in class org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1 at new org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1(JsonbJaxrsProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	111	Medium
Exception thrown in class org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1 at new org.apache.johnzon.jaxrs.jsonb.jaxrs.JsonbJaxrsProvider$1(JsonbJaxrsProvider, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	111	Medium

org.apache.johnzon.jsonb.JohnzonBuilder

Bug	Category	Details	Line	Priority
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.lambda$build$5(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	147	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toBool(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	377	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toInt(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	381	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.lambda$build$5(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	147	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toBool(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	377	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toInt(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	381	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.lambda$build$5(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	147	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toBool(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	377	Medium
Boxed value is unboxed and then immediately reboxed in org.apache.johnzon.jsonb.JohnzonBuilder.toInt(Object)	PERFORMANCE	BX_UNBOXING_IMMEDIATELY_REBOXED	381	Medium

org.apache.johnzon.jsonb.JohnzonJsonb

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jsonb.JohnzonJsonb(Mapper, boolean, Consumer) may expose internal representation by storing an externally mutable object into JohnzonJsonb.delegate	MALICIOUS_CODE	EI_EXPOSE_REP2	67	Medium
new org.apache.johnzon.jsonb.JohnzonJsonb(Mapper, boolean, Consumer) may expose internal representation by storing an externally mutable object into JohnzonJsonb.delegate	MALICIOUS_CODE	EI_EXPOSE_REP2	67	Medium
new org.apache.johnzon.jsonb.JohnzonJsonb(Mapper, boolean, Consumer) may expose internal representation by storing an externally mutable object into JohnzonJsonb.delegate	MALICIOUS_CODE	EI_EXPOSE_REP2	67	Medium

org.apache.johnzon.jsonb.JsonbAccessMode

Bug	Category	Details	Line	Priority
new org.apache.johnzon.jsonb.JsonbAccessMode(PropertyNamingStrategy, String, PropertyVisibilityStrategy, boolean, Map, JohnzonAdapterFactory, JsonProvider, Supplier, Supplier, AccessMode, boolean, boolean, boolean) may expose internal representation by storing an externally mutable object into JsonbAccessMode.defaultConverters	MALICIOUS_CODE	EI_EXPOSE_REP2	177	Medium
Class<?> is incompatible with expected argument type org.apache.johnzon.mapper.internal.AdapterKey in org.apache.johnzon.jsonb.JsonbAccessMode.findFactory(Class, Function[])	CORRECTNESS	GC_UNRELATED_TYPES	269	High
new org.apache.johnzon.jsonb.JsonbAccessMode(PropertyNamingStrategy, String, PropertyVisibilityStrategy, boolean, Map, JohnzonAdapterFactory, JsonProvider, Supplier, Supplier, AccessMode, boolean, boolean, boolean) may expose internal representation by storing an externally mutable object into JsonbAccessMode.defaultConverters	MALICIOUS_CODE	EI_EXPOSE_REP2	177	Medium
Class<?> is incompatible with expected argument type org.apache.johnzon.mapper.internal.AdapterKey in org.apache.johnzon.jsonb.JsonbAccessMode.findFactory(Class, Function[])	CORRECTNESS	GC_UNRELATED_TYPES	269	High
new org.apache.johnzon.jsonb.JsonbAccessMode(PropertyNamingStrategy, String, PropertyVisibilityStrategy, boolean, Map, JohnzonAdapterFactory, JsonProvider, Supplier, Supplier, AccessMode, boolean, boolean, boolean) may expose internal representation by storing an externally mutable object into JsonbAccessMode.defaultConverters	MALICIOUS_CODE	EI_EXPOSE_REP2	177	Medium
Class<?> is incompatible with expected argument type org.apache.johnzon.mapper.internal.AdapterKey in org.apache.johnzon.jsonb.JsonbAccessMode.findFactory(Class, Function[])	CORRECTNESS	GC_UNRELATED_TYPES	269	High

org.apache.johnzon.jsonb.JsonbAccessMode$2

Bug	Category	Details	Line	Priority
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$2.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	326	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$2.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	326	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$2.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	326	High

org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters(JsonbAccessMode, AccessMode$DecoratedType) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1166	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters(JsonbAccessMode, AccessMode$DecoratedType) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1166	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters(JsonbAccessMode, AccessMode$DecoratedType) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1166	Medium

org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1

Bug	Category	Details	Line	Priority
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1144	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1144	High
Return value of putIfAbsent is ignored, but fn is reused in org.apache.johnzon.jsonb.JsonbAccessMode$ReaderConverters$1.fromJson(JsonValue, Type, MappingParser)	MT_CORRECTNESS	RV_RETURN_VALUE_OF_PUTIFABSENT_IGNORED	1144	High

org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters(JsonbAccessMode, AccessMode$DecoratedType, Types) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1225	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters(JsonbAccessMode, AccessMode$DecoratedType, Types) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1225	Medium
Exception thrown in class org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters at new org.apache.johnzon.jsonb.JsonbAccessMode$WriterConverters(JsonbAccessMode, AccessMode$DecoratedType, Types) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	1225	Medium

org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory

Bug	Category	Details	Line	Priority
Public method org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory.create(Class) uses reflection to create a class it gets in its parameter which could increase the accessibility of any class	MALICIOUS_CODE	REFLC_REFLECTION_MAY_INCREASE_ACCESSIBILITY_OF_CLASS	27	Medium
Public method org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory.create(Class) uses reflection to create a class it gets in its parameter which could increase the accessibility of any class	MALICIOUS_CODE	REFLC_REFLECTION_MAY_INCREASE_ACCESSIBILITY_OF_CLASS	27	Medium
Public method org.apache.johnzon.jsonb.factory.SimpleJohnzonAdapterFactory.create(Class) uses reflection to create a class it gets in its parameter which could increase the accessibility of any class	MALICIOUS_CODE	REFLC_REFLECTION_MAY_INCREASE_ACCESSIBILITY_OF_CLASS	27	Medium

org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getAliases() may expose internal representation by returning JsonbPolymorphismTypeInfo.aliases	MALICIOUS_CODE	EI_EXPOSE_REP	64	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getParents() may expose internal representation by returning JsonbPolymorphismTypeInfo.parents	MALICIOUS_CODE	EI_EXPOSE_REP	72	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getAliases() may expose internal representation by returning JsonbPolymorphismTypeInfo.aliases	MALICIOUS_CODE	EI_EXPOSE_REP	64	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getParents() may expose internal representation by returning JsonbPolymorphismTypeInfo.parents	MALICIOUS_CODE	EI_EXPOSE_REP	72	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getAliases() may expose internal representation by returning JsonbPolymorphismTypeInfo.aliases	MALICIOUS_CODE	EI_EXPOSE_REP	64	Medium
org.apache.johnzon.jsonb.polymorphism.JsonbPolymorphismTypeInfo.getParents() may expose internal representation by returning JsonbPolymorphismTypeInfo.parents	MALICIOUS_CODE	EI_EXPOSE_REP	72	Medium

org.apache.johnzon.websocket.jsonb.JsonbTextDecoder

Bug	Category	Details	Line	Priority
Field JsonbTextDecoder.type masks field in superclass org.apache.johnzon.websocket.internal.TypeAwareDecoder	CORRECTNESS	MF_CLASS_MASKS_FIELD		Medium
Unwritten public or protected field: org.apache.johnzon.websocket.jsonb.JsonbTextDecoder.type	STYLE	UWF_UNWRITTEN_PUBLIC_OR_PROTECTED_FIELD	52	Medium
Field JsonbTextDecoder.type masks field in superclass org.apache.johnzon.websocket.internal.TypeAwareDecoder	CORRECTNESS	MF_CLASS_MASKS_FIELD		Medium
Unwritten public or protected field: org.apache.johnzon.websocket.jsonb.JsonbTextDecoder.type	STYLE	UWF_UNWRITTEN_PUBLIC_OR_PROTECTED_FIELD	52	Medium
Field JsonbTextDecoder.type masks field in superclass org.apache.johnzon.websocket.internal.TypeAwareDecoder	CORRECTNESS	MF_CLASS_MASKS_FIELD		Medium
Unwritten public or protected field: org.apache.johnzon.websocket.jsonb.JsonbTextDecoder.type	STYLE	UWF_UNWRITTEN_PUBLIC_OR_PROTECTED_FIELD	52	Medium

org.apache.johnzon.websocket.jsr.JsrObjectDecoder

Bug	Category	Details	Priority
Unused field: org.apache.johnzon.websocket.jsr.JsrObjectDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrObjectDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrObjectDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium

org.apache.johnzon.websocket.jsr.JsrStructureDecoder

Bug	Category	Details	Priority
Unused field: org.apache.johnzon.websocket.jsr.JsrStructureDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrStructureDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium
Unused field: org.apache.johnzon.websocket.jsr.JsrStructureDecoder.factory	PERFORMANCE	UUF_UNUSED_FIELD	Medium

org.apache.johnzon.websocket.mapper.JohnzonTextDecoder

Bug	Category	Details	Line	Priority
new org.apache.johnzon.websocket.mapper.JohnzonTextDecoder(Mapper, Type) may expose internal representation by storing an externally mutable object into JohnzonTextDecoder.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	50	Medium
new org.apache.johnzon.websocket.mapper.JohnzonTextDecoder(Mapper, Type) may expose internal representation by storing an externally mutable object into JohnzonTextDecoder.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	50	Medium
new org.apache.johnzon.websocket.mapper.JohnzonTextDecoder(Mapper, Type) may expose internal representation by storing an externally mutable object into JohnzonTextDecoder.mapper	MALICIOUS_CODE	EI_EXPOSE_REP2	50	Medium

org.apache.johnzon.jsonschema.JsonSchemaValidator

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.JsonSchemaValidator.apply(JsonValue) may expose internal representation by returning JsonSchemaValidator.SUCCESS	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
org.apache.johnzon.jsonschema.JsonSchemaValidator.apply(JsonValue) may expose internal representation by returning JsonSchemaValidator.SUCCESS	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
org.apache.johnzon.jsonschema.JsonSchemaValidator.apply(JsonValue) may expose internal representation by returning JsonSchemaValidator.SUCCESS	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium

org.apache.johnzon.jsonschema.JsonSchemaValidatorFactory

Bug	Category	Details	Line	Priority
Shared primitive variable "failFast" in one thread may not yield the value of the most recent write from another thread	MT_CORRECTNESS	AT_STALE_THREAD_WRITE_OF_PRIMITIVE	109	Medium
Shared primitive variable "failFast" in one thread may not yield the value of the most recent write from another thread	MT_CORRECTNESS	AT_STALE_THREAD_WRITE_OF_PRIMITIVE	109	Medium
Shared primitive variable "failFast" in one thread may not yield the value of the most recent write from another thread	MT_CORRECTNESS	AT_STALE_THREAD_WRITE_OF_PRIMITIVE	109	Medium

org.apache.johnzon.jsonschema.ValidationResult

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.ValidationResult.getErrors() may expose internal representation by returning ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP	39	Medium
org.apache.johnzon.jsonschema.ValidationResult.setErrors(Collection) may expose internal representation by storing an externally mutable object into ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP2	43	Medium
org.apache.johnzon.jsonschema.ValidationResult.getErrors() may expose internal representation by returning ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP	39	Medium
org.apache.johnzon.jsonschema.ValidationResult.setErrors(Collection) may expose internal representation by storing an externally mutable object into ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP2	43	Medium
org.apache.johnzon.jsonschema.ValidationResult.getErrors() may expose internal representation by returning ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP	39	Medium
org.apache.johnzon.jsonschema.ValidationResult.setErrors(Collection) may expose internal representation by storing an externally mutable object into ValidationResult.errors	MALICIOUS_CODE	EI_EXPOSE_REP2	43	Medium

org.apache.johnzon.jsonschema.generator.PojoGenerator

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.PojoGenerator.generate() may expose internal representation by returning PojoGenerator.nested	MALICIOUS_CODE	EI_EXPOSE_REP	69	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator.generate() may expose internal representation by returning PojoGenerator.nested	MALICIOUS_CODE	EI_EXPOSE_REP	69	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator.generate() may expose internal representation by returning PojoGenerator.nested	MALICIOUS_CODE	EI_EXPOSE_REP	69	Medium

org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getAttributes() may expose internal representation by returning PojoGenerator$Ref.attributes	MALICIOUS_CODE	EI_EXPOSE_REP	775	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getImports() may expose internal representation by returning PojoGenerator$Ref.imports	MALICIOUS_CODE	EI_EXPOSE_REP	771	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getNested() may expose internal representation by returning PojoGenerator$Ref.nested	MALICIOUS_CODE	EI_EXPOSE_REP	779	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getAttributes() may expose internal representation by returning PojoGenerator$Ref.attributes	MALICIOUS_CODE	EI_EXPOSE_REP	775	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getImports() may expose internal representation by returning PojoGenerator$Ref.imports	MALICIOUS_CODE	EI_EXPOSE_REP	771	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getNested() may expose internal representation by returning PojoGenerator$Ref.nested	MALICIOUS_CODE	EI_EXPOSE_REP	779	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getAttributes() may expose internal representation by returning PojoGenerator$Ref.attributes	MALICIOUS_CODE	EI_EXPOSE_REP	775	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getImports() may expose internal representation by returning PojoGenerator$Ref.imports	MALICIOUS_CODE	EI_EXPOSE_REP	771	Medium
org.apache.johnzon.jsonschema.generator.PojoGenerator$Ref.getNested() may expose internal representation by returning PojoGenerator$Ref.nested	MALICIOUS_CODE	EI_EXPOSE_REP	779	Medium

org.apache.johnzon.jsonschema.generator.Schema

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.Schema.getAllOf() may expose internal representation by returning Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP	178	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAnyOf() may expose internal representation by returning Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP	186	Medium
org.apache.johnzon.jsonschema.generator.Schema.getDefinitions() may expose internal representation by returning Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	146	Medium
org.apache.johnzon.jsonschema.generator.Schema.getEnumeration() may expose internal representation by returning Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP	218	Medium
org.apache.johnzon.jsonschema.generator.Schema.getItems() may expose internal representation by returning Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP	258	Medium
org.apache.johnzon.jsonschema.generator.Schema.getNot() may expose internal representation by returning Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP	338	Medium
org.apache.johnzon.jsonschema.generator.Schema.getOneOf() may expose internal representation by returning Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP	354	Medium
org.apache.johnzon.jsonschema.generator.Schema.getProperties() may expose internal representation by returning Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP	162	Medium
org.apache.johnzon.jsonschema.generator.Schema.getRequired() may expose internal representation by returning Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP	402	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAllOf(List) may expose internal representation by storing an externally mutable object into Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP2	182	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAnyOf(List) may expose internal representation by storing an externally mutable object into Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP2	190	Medium
org.apache.johnzon.jsonschema.generator.Schema.setDefinitions(Map) may expose internal representation by storing an externally mutable object into Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP2	150	Medium
org.apache.johnzon.jsonschema.generator.Schema.setEnumeration(List) may expose internal representation by storing an externally mutable object into Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP2	222	Medium
org.apache.johnzon.jsonschema.generator.Schema.setItems(Schema) may expose internal representation by storing an externally mutable object into Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP2	262	Medium
org.apache.johnzon.jsonschema.generator.Schema.setNot(Schema) may expose internal representation by storing an externally mutable object into Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP2	342	Medium
org.apache.johnzon.jsonschema.generator.Schema.setOneOf(List) may expose internal representation by storing an externally mutable object into Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP2	358	Medium
org.apache.johnzon.jsonschema.generator.Schema.setProperties(Map) may expose internal representation by storing an externally mutable object into Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP2	166	Medium
org.apache.johnzon.jsonschema.generator.Schema.setRequired(List) may expose internal representation by storing an externally mutable object into Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP2	406	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAllOf() may expose internal representation by returning Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP	178	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAnyOf() may expose internal representation by returning Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP	186	Medium
org.apache.johnzon.jsonschema.generator.Schema.getDefinitions() may expose internal representation by returning Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	146	Medium
org.apache.johnzon.jsonschema.generator.Schema.getEnumeration() may expose internal representation by returning Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP	218	Medium
org.apache.johnzon.jsonschema.generator.Schema.getItems() may expose internal representation by returning Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP	258	Medium
org.apache.johnzon.jsonschema.generator.Schema.getNot() may expose internal representation by returning Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP	338	Medium
org.apache.johnzon.jsonschema.generator.Schema.getOneOf() may expose internal representation by returning Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP	354	Medium
org.apache.johnzon.jsonschema.generator.Schema.getProperties() may expose internal representation by returning Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP	162	Medium
org.apache.johnzon.jsonschema.generator.Schema.getRequired() may expose internal representation by returning Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP	402	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAllOf(List) may expose internal representation by storing an externally mutable object into Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP2	182	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAnyOf(List) may expose internal representation by storing an externally mutable object into Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP2	190	Medium
org.apache.johnzon.jsonschema.generator.Schema.setDefinitions(Map) may expose internal representation by storing an externally mutable object into Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP2	150	Medium
org.apache.johnzon.jsonschema.generator.Schema.setEnumeration(List) may expose internal representation by storing an externally mutable object into Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP2	222	Medium
org.apache.johnzon.jsonschema.generator.Schema.setItems(Schema) may expose internal representation by storing an externally mutable object into Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP2	262	Medium
org.apache.johnzon.jsonschema.generator.Schema.setNot(Schema) may expose internal representation by storing an externally mutable object into Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP2	342	Medium
org.apache.johnzon.jsonschema.generator.Schema.setOneOf(List) may expose internal representation by storing an externally mutable object into Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP2	358	Medium
org.apache.johnzon.jsonschema.generator.Schema.setProperties(Map) may expose internal representation by storing an externally mutable object into Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP2	166	Medium
org.apache.johnzon.jsonschema.generator.Schema.setRequired(List) may expose internal representation by storing an externally mutable object into Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP2	406	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAllOf() may expose internal representation by returning Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP	178	Medium
org.apache.johnzon.jsonschema.generator.Schema.getAnyOf() may expose internal representation by returning Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP	186	Medium
org.apache.johnzon.jsonschema.generator.Schema.getDefinitions() may expose internal representation by returning Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	146	Medium
org.apache.johnzon.jsonschema.generator.Schema.getEnumeration() may expose internal representation by returning Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP	218	Medium
org.apache.johnzon.jsonschema.generator.Schema.getItems() may expose internal representation by returning Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP	258	Medium
org.apache.johnzon.jsonschema.generator.Schema.getNot() may expose internal representation by returning Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP	338	Medium
org.apache.johnzon.jsonschema.generator.Schema.getOneOf() may expose internal representation by returning Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP	354	Medium
org.apache.johnzon.jsonschema.generator.Schema.getProperties() may expose internal representation by returning Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP	162	Medium
org.apache.johnzon.jsonschema.generator.Schema.getRequired() may expose internal representation by returning Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP	402	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAllOf(List) may expose internal representation by storing an externally mutable object into Schema.allOf	MALICIOUS_CODE	EI_EXPOSE_REP2	182	Medium
org.apache.johnzon.jsonschema.generator.Schema.setAnyOf(List) may expose internal representation by storing an externally mutable object into Schema.anyOf	MALICIOUS_CODE	EI_EXPOSE_REP2	190	Medium
org.apache.johnzon.jsonschema.generator.Schema.setDefinitions(Map) may expose internal representation by storing an externally mutable object into Schema.definitions	MALICIOUS_CODE	EI_EXPOSE_REP2	150	Medium
org.apache.johnzon.jsonschema.generator.Schema.setEnumeration(List) may expose internal representation by storing an externally mutable object into Schema.enumeration	MALICIOUS_CODE	EI_EXPOSE_REP2	222	Medium
org.apache.johnzon.jsonschema.generator.Schema.setItems(Schema) may expose internal representation by storing an externally mutable object into Schema.items	MALICIOUS_CODE	EI_EXPOSE_REP2	262	Medium
org.apache.johnzon.jsonschema.generator.Schema.setNot(Schema) may expose internal representation by storing an externally mutable object into Schema.not	MALICIOUS_CODE	EI_EXPOSE_REP2	342	Medium
org.apache.johnzon.jsonschema.generator.Schema.setOneOf(List) may expose internal representation by storing an externally mutable object into Schema.oneOf	MALICIOUS_CODE	EI_EXPOSE_REP2	358	Medium
org.apache.johnzon.jsonschema.generator.Schema.setProperties(Map) may expose internal representation by storing an externally mutable object into Schema.properties	MALICIOUS_CODE	EI_EXPOSE_REP2	166	Medium
org.apache.johnzon.jsonschema.generator.Schema.setRequired(List) may expose internal representation by storing an externally mutable object into Schema.required	MALICIOUS_CODE	EI_EXPOSE_REP2	406	Medium

org.apache.johnzon.jsonschema.generator.SchemaProcessor

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.johnzon.jsonschema.generator.SchemaProcessor at new org.apache.johnzon.jsonschema.generator.SchemaProcessor() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	76	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.jsonschema.generator.SchemaProcessor.find(String, Annotation)	STYLE	REC_CATCH_EXCEPTION	290	Medium
Useless object stored in variable items of method org.apache.johnzon.jsonschema.generator.SchemaProcessor.fillSchema(Type, Schema, SchemaProcessor$Cache, SchemaProcessor$ReflectionValueExtractor, SchemaProcessor$Instance)	STYLE	UC_USELESS_OBJECT	139	Medium
Exception thrown in class org.apache.johnzon.jsonschema.generator.SchemaProcessor at new org.apache.johnzon.jsonschema.generator.SchemaProcessor() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	76	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.jsonschema.generator.SchemaProcessor.find(String, Annotation)	STYLE	REC_CATCH_EXCEPTION	290	Medium
Useless object stored in variable items of method org.apache.johnzon.jsonschema.generator.SchemaProcessor.fillSchema(Type, Schema, SchemaProcessor$Cache, SchemaProcessor$ReflectionValueExtractor, SchemaProcessor$Instance)	STYLE	UC_USELESS_OBJECT	139	Medium
Exception thrown in class org.apache.johnzon.jsonschema.generator.SchemaProcessor at new org.apache.johnzon.jsonschema.generator.SchemaProcessor() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	76	Medium
Exception is caught when Exception is not thrown in org.apache.johnzon.jsonschema.generator.SchemaProcessor.find(String, Annotation)	STYLE	REC_CATCH_EXCEPTION	290	Medium
Useless object stored in variable items of method org.apache.johnzon.jsonschema.generator.SchemaProcessor.fillSchema(Type, Schema, SchemaProcessor$Cache, SchemaProcessor$ReflectionValueExtractor, SchemaProcessor$Instance)	STYLE	UC_USELESS_OBJECT	139	Medium

org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getDefinitions() may expose internal representation by returning SchemaProcessor$InMemoryCache.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	540	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getSchemas() may expose internal representation by returning SchemaProcessor$InMemoryCache.schemas	MALICIOUS_CODE	EI_EXPOSE_REP	536	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getDefinitions() may expose internal representation by returning SchemaProcessor$InMemoryCache.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	540	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getSchemas() may expose internal representation by returning SchemaProcessor$InMemoryCache.schemas	MALICIOUS_CODE	EI_EXPOSE_REP	536	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getDefinitions() may expose internal representation by returning SchemaProcessor$InMemoryCache.definitions	MALICIOUS_CODE	EI_EXPOSE_REP	540	Medium
org.apache.johnzon.jsonschema.generator.SchemaProcessor$InMemoryCache.getSchemas() may expose internal representation by returning SchemaProcessor$InMemoryCache.schemas	MALICIOUS_CODE	EI_EXPOSE_REP	536	Medium

org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor

Bug	Category	Details	Line	Priority
Possible null pointer dereference of field in org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor.createDemoInstance(Object, Field)	CORRECTNESS	NP_NULL_ON_SOME_PATH	606	Medium
Possible null pointer dereference of field in org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor.createDemoInstance(Object, Field)	CORRECTNESS	NP_NULL_ON_SOME_PATH	606	Medium
Possible null pointer dereference of field in org.apache.johnzon.jsonschema.generator.SchemaProcessor$ReflectionValueExtractor.createDemoInstance(Object, Field)	CORRECTNESS	NP_NULL_ON_SOME_PATH	606	Medium

org.apache.johnzon.jsonschema.spi.ValidationContext

Bug	Category	Details	Line	Priority
org.apache.johnzon.jsonschema.spi.ValidationContext.getPath() may expose internal representation by returning ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
new org.apache.johnzon.jsonschema.spi.ValidationContext(String[], JsonObject, Function) may expose internal representation by storing an externally mutable object into ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP2	35	Medium
org.apache.johnzon.jsonschema.spi.ValidationContext.getPath() may expose internal representation by returning ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
new org.apache.johnzon.jsonschema.spi.ValidationContext(String[], JsonObject, Function) may expose internal representation by storing an externally mutable object into ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP2	35	Medium
org.apache.johnzon.jsonschema.spi.ValidationContext.getPath() may expose internal representation by returning ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP	45	Medium
new org.apache.johnzon.jsonschema.spi.ValidationContext(String[], JsonObject, Function) may expose internal representation by storing an externally mutable object into ValidationContext.path	MALICIOUS_CODE	EI_EXPOSE_REP2	35	Medium

org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl

Bug	Category	Details	Line	Priority
Test for floating point equality in org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl.isValid(double)	STYLE	FE_FLOATING_POINT_EQUALITY	51	High
Test for floating point equality in org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl.isValid(double)	STYLE	FE_FLOATING_POINT_EQUALITY	51	High
Test for floating point equality in org.apache.johnzon.jsonschema.spi.builtin.MultipleOfValidation$Impl.isValid(double)	STYLE	FE_FLOATING_POINT_EQUALITY	51	High

org.apache.johnzon.maven.plugin.ExampleToModelMojo

Bug	Category	Details	Line	Priority
Found reliance on default encoding in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String): new java.io.FileReader(File)	I18N	DM_DEFAULT_ENCODING	106	High
org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String) may fail to clean up java.io.Reader	EXPERIMENTAL	OBL_UNSATISFIED_OBLIGATION	106	Medium
Exceptional return value of java.io.File.mkdirs() ignored in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generateFile(JsonReaderFactory, File)	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	346	Medium
Found reliance on default encoding in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String): new java.io.FileReader(File)	I18N	DM_DEFAULT_ENCODING	106	High
org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String) may fail to clean up java.io.Reader	EXPERIMENTAL	OBL_UNSATISFIED_OBLIGATION	106	Medium
Exceptional return value of java.io.File.mkdirs() ignored in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generateFile(JsonReaderFactory, File)	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	346	Medium
Found reliance on default encoding in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String): new java.io.FileReader(File)	I18N	DM_DEFAULT_ENCODING	106	High
org.apache.johnzon.maven.plugin.ExampleToModelMojo.generate(JsonReaderFactory, File, Writer, String) may fail to clean up java.io.Reader	EXPERIMENTAL	OBL_UNSATISFIED_OBLIGATION	106	Medium
Exceptional return value of java.io.File.mkdirs() ignored in org.apache.johnzon.maven.plugin.ExampleToModelMojo.generateFile(JsonReaderFactory, File)	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	346	Medium

org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo

Bug	Category	Details	Line	Priority
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo.dump(Map) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	122	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo.dump(Map) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	122	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo.dump(Map) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	122	Medium

org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1

Bug	Category	Details	Line	Priority
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1.visitFile(Path, BasicFileAttributes) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	84	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1.visitFile(Path, BasicFileAttributes) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	84	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.JsonSchemaToPojoMojo$1.visitFile(Path, BasicFileAttributes) due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	84	Medium

org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo

Bug	Category	Details	Line	Priority
Possible null pointer dereference in org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo.execute() due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	95	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo.execute() due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	95	Medium
Possible null pointer dereference in org.apache.johnzon.maven.plugin.PojoToJsonSchemaMojo.execute() due to return value of called method	STYLE	NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE	95	Medium

org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper

Bug	Category	Details	Line	Priority
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.id	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	187	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.value	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	188	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.id	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	187	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.value	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	188	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.id	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	187	Medium
Unread public/protected field: org.apache.johnzon.jsonb.extras.polymorphism.Polymorphic$Wrapper.value	STYLE	URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD	188	Medium

org.apache.johnzon.osgi.Activator

Bug	Category	Details	Line	Priority
Suspicious comparison of Boolean references in org.apache.johnzon.osgi.Activator.lambda$whenTrue$3(Boolean)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	141	Medium
Suspicious comparison of Boolean references in org.apache.johnzon.osgi.Activator.lambda$whenTrue$3(Boolean)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	141	Medium
Suspicious comparison of Boolean references in org.apache.johnzon.osgi.Activator.lambda$whenTrue$3(Boolean)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	141	Medium

org.apache.johnzon.jsonlogic.JohnzonJsonLogic

Bug	Category	Details	Line	Priority
Unread field: org.apache.johnzon.jsonlogic.JohnzonJsonLogic.cacheJsonMergePatches	PERFORMANCE	URF_UNREAD_FIELD	85	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.apply(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	113	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.applyStage(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	139	Medium
Unread field: org.apache.johnzon.jsonlogic.JohnzonJsonLogic.cacheJsonMergePatches	PERFORMANCE	URF_UNREAD_FIELD	85	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.apply(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	113	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.applyStage(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	139	Medium
Unread field: org.apache.johnzon.jsonlogic.JohnzonJsonLogic.cacheJsonMergePatches	PERFORMANCE	URF_UNREAD_FIELD	85	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.apply(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	113	Medium
org.apache.johnzon.jsonlogic.JohnzonJsonLogic.applyStage(JsonValue, JsonValue) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	139	Medium