solution.txt

SAST
            String sql = "select * from users where (email =? and password =?)";

            Connection connection = pool.getConnection();
            //Statement statement = connection.createStatement();
            PreparedStatement statement = connection.preparedStatement(sql);
            statement.setString(1, email);
            statement.setString(2, token);

            HttpSession session = request.getSession();
            String role = (String)session.getAttribute("role");
            if (role.equals(ADMIN)) {
                //ResultSet result = statement.executeQuery(sql);
                ResultSet result = statement.executeQuery();
                statement.close();
                connection.close();
            }

SCA
org.json version changes from 20090211 to 20200518

SCS
ua-parser-js version changes from 0.7.29 to 0.7.30


KICS
RUN user add -ms /bin/bash test_user
USER test_user
WORKDIR /home/test_user