{
  "version": "pre-push-diagnostic-v1-2026-09-12",
  "ranking_mode": "evidence",
  "engine": "joern-4.0.625",
  "facts": "642d643d5b40a20fe482ace566cc77d132870930ecd2f2e881dcecd7dc9a0641",
  "queries": "64c1534edb07e770ab8631b48bc156ef54b71ddb8d8ee4357fd5022eb11f0229",
  "policy": "diagnostic-only-no-admission-v1",
  "scope": "first-party-only; declared vendor exclusion in graph and targets; exact selected/deferred question IDs required per record",
  "hardware": "Linux-6.8.0-138-generic-x86_64-with-glibc2.39",
  "budget_seconds": 30,
  "core": "7ac2bc93b35ce9d0cdcfc543266025519999ff45339657d4a5d283c67957d682",
  "targets": {
    "pmpro-introduce": {
      "path": "classes/class.memberorder.php",
      "function": "getMemberOrderByCode",
      "family": "injection",
      "lines": [
        936
      ]
    },
    "pmpro-repair": {
      "path": "classes/class.memberorder.php",
      "function": "getMemberOrderByCode",
      "family": "injection",
      "lines": [
        937
      ]
    },
    "pmpro-benign": {
      "path": "classes/class.memberorder.php",
      "function": "getMemberOrderByCode",
      "family": "injection",
      "lines": [
        937
      ]
    },
    "nodegoat-introduce": {
      "path": "app/routes/contributions.js",
      "function": "handleContributionsUpdate",
      "family": "injection",
      "lines": [
        32,
        33,
        34
      ]
    },
    "nodegoat-repair": {
      "path": "app/routes/contributions.js",
      "function": "handleContributionsUpdate",
      "family": "injection",
      "lines": [
        32,
        33,
        34
      ]
    },
    "nodegoat-benign": {
      "path": "app/routes/contributions.js",
      "function": "handleContributionsUpdate",
      "family": "injection",
      "lines": [
        32,
        33,
        34
      ]
    },
    "VAmPI-SQLI": {
      "path": "models/user_model.py",
      "function": "get_user",
      "family": "injection",
      "lines": [
        73
      ]
    },
    "VAmPI-BOLA": {
      "path": "api_views/users.py",
      "function": "update_password",
      "family": "access_control",
      "lines": [
        187
      ]
    },
    "VAmPI-BOLA-BOOKS": {
      "path": "api_views/books.py",
      "function": "get_by_title",
      "family": "access_control",
      "lines": [
        51
      ]
    }
  }
}