Need help to find out the root cause of SQL Injection in PL sql package

Question

We have some packages in PL SQL and we did some security scan by Veracode. We have some to solve some SQL injection problem. I am attaching the code and the line number from