[high] semgrep: Insecure WebSocket Detected. WebSocket Secure (wss) should be used for all WebSocket connections. #24

Open
opened 2026-03-18 16:01:23 +00:00 by sharang · 0 comments
Owner

high Finding

Scanner: semgrep
Severity: high
Rule: javascript.lang.security.detect-insecure-websocket.detect-insecure-websocket

Description

Insecure WebSocket Detected. WebSocket Secure (wss) should be used for all WebSocket connections.

Location

File: /tmp/compliance-scanner/repos/Compliance Scanner/compliance-agent/src/pentest/report/pdf.rs (line 9)

Code

requires login

Fingerprint: 688e6553f938daefa45a512d8a310415319648a0f4afd2af93b00b1c28dcfabc
Generated by compliance-scanner

Labels: severity:high, scanner:semgrep, compliance-scanner

## high Finding **Scanner:** semgrep **Severity:** high **Rule:** javascript.lang.security.detect-insecure-websocket.detect-insecure-websocket ### Description Insecure WebSocket Detected. WebSocket Secure (wss) should be used for all WebSocket connections. ### Location **File:** `/tmp/compliance-scanner/repos/Compliance Scanner/compliance-agent/src/pentest/report/pdf.rs` (line 9) ### Code ``` requires login ``` --- *Fingerprint:* `688e6553f938daefa45a512d8a310415319648a0f4afd2af93b00b1c28dcfabc` *Generated by compliance-scanner* **Labels:** severity:high, scanner:semgrep, compliance-scanner
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#24