[high] semgrep: Insecure WebSocket Detected. WebSocket Secure (wss) should be used for all WebSocket connections. #25

Open
opened 2026-03-18 16:01:23 +00:00 by sharang · 0 comments
Owner

high Finding

Scanner: semgrep
Severity: high
Rule: javascript.lang.security.detect-insecure-websocket.detect-insecure-websocket

Description

Insecure WebSocket Detected. WebSocket Secure (wss) should be used for all WebSocket connections.

Location

File: /tmp/compliance-scanner/repos/Compliance Scanner/compliance-agent/src/pentest/report/pdf.rs (line 62)

Code

requires login

Fingerprint: cdd662ca6394f15d7b19ee19c90232ca5a0a697bcd0226b27828e43f8abcc85b
Generated by compliance-scanner

Labels: severity:high, scanner:semgrep, compliance-scanner

## high Finding **Scanner:** semgrep **Severity:** high **Rule:** javascript.lang.security.detect-insecure-websocket.detect-insecure-websocket ### Description Insecure WebSocket Detected. WebSocket Secure (wss) should be used for all WebSocket connections. ### Location **File:** `/tmp/compliance-scanner/repos/Compliance Scanner/compliance-agent/src/pentest/report/pdf.rs` (line 62) ### Code ``` requires login ``` --- *Fingerprint:* `cdd662ca6394f15d7b19ee19c90232ca5a0a697bcd0226b27828e43f8abcc85b` *Generated by compliance-scanner* **Labels:** severity:high, scanner:semgrep, compliance-scanner
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#25