# Zenoss CWE-407 Scan — CLEAN

Scanned: 2026-03-30
Target: zenoss-prodbin (https://github.com/zenoss/zenoss-prodbin)
Language: Python

## Scan Summary

Zenoss uses Zope catalogs, OrderedDict, dicts, and sets throughout its
codebase for data lookups and dedup. Key findings:

- **Event dedup**: Uses OrderedDict (O(1) fingerprint lookup) — clean
- **Device/component lookups**: Uses catalog queries (indexed) — clean
- **Collection dedup**: Uses set for tid tracking — clean
- **Link manager**: Uses set subtraction for visited tracking — clean
- **Config cache**: Uses model index queries — clean

No CWE-407 defects found with sufficient severity for a hot-path impact.
Minor O(N×M) patterns exist (MibModule.deleteMibNodes, ZenPackCmd dependency
resolution) but operate on small, user-bounded inputs.
