# janusgraph — diamond recursion CWE-407 scan: CLEAN

## Scan date: 2026-03-29

## Method scanned

`TypeUtil`, `JanusGraphSchemaVertex`, `RelationTypeVertex`, `VertexLabelVertex`,
`EdgeLabelVertex` — schema type dependency traversal.

## Finding

Schema-type methods (`getRelated`, `getTypeModifier`, `getBaseType`) return flat
lists from the backing graph store; they do not recurse over a DAG without a
visited set. `getBaseType` terminates at a fixed-depth one-hop (returns
`type.getBaseType()` which is a single pointer, not iterated).

No recursive multi-hop schema traversal without a visited accumulator was found.

## Verdict: CLEAN
