# JanusGraph — CWE-407 Scan Result: CLEAN (new scan)

Scanned 2026-03-29. No new O(N²) list membership defects found beyond previously known.

Note: janusgraph-0001 (MultiCondition ArrayList.contains) was previously identified.

Verified new scan:
- `QueryProcessor.allNew`: uses `HashSet<R>` when dedup needed — O(1)
- `Text.tokens`: uses `HashSet<String>` — O(1)
- `IndexSelectionUtil.givenKeys`: depends on caller type; not in hot loop