SONAR “SQL Injection” smell for jdbcTemplate.queryForList(query)

Question

I have below code which gets all the results from a database table into List> format using jdbcTemplate.