#fixed code
                                @GET
    @Path("/{projectId}")
    public Response getProject(@Context User user,
                             @PathParam("projectId") int projectId) {

        DashBoard project = user.profile.getDashById(projectId);
        //project.token = user.dashTokens.get(projectId);

        return ok(project);
    }
#vulnerable code 
                                @GET
    @Path("/{projectId}")
    public Response getProject(@Context User user,
                             @PathParam("projectId") int projectId) {

        DashBoard project = user.profile.getDashById(projectId);
        project.token = user.dashTokens.get(projectId);

        return ok(project);
    } 
                            #location 7 
                            #vulnerability type NULL_DEREFERENCE