# Apache Druid — CWE-407 Scan Result: CLEAN

Scanned 2026-03-29. No new O(N²) list membership defects found.

Verified:
- `RunRules.overshadowed`: is a `Set<DataSegment>` — O(1)
- `HttpLoadQueuePeon.activeRequestSegments`: is a `HashSet<DataSegment>` — O(1)
- `ListColumnIncluderator.columns`: is a `TreeSet<String>` — O(log N)
- `GroupingEngine.dimsInSubtotalSpec`: is `ImmutableSet` — O(1)
- `FilterSegmentPruner.filterFields`: is a `Set<String>` — O(1)