SecOps #1290: [Sécurité] Vulnérabilité de code : cron-service.js:1826 (problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server) - GetYourJob - Redmine

Custom queries

Issues assigned to me
Reported issues
Updated issues
Watched issues

Actions

SecOps #1290

open

[Sécurité] Vulnérabilité de code : cron-service.js:1826 (problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server)

SecOps #1290: [Sécurité] Vulnérabilité de code : cron-service.js:1826 (problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server)

Added by Client Dashboard about 1 month ago. Updated 29 days ago.

Status:

Submitted

Priority:

Normal

Assignee:

Start date:

07/02/2026

Due date:

% Done:

Estimated time:

spec_ref:

build_status:

build_number:

ci_run_url:

scan_status:

scan_report_url:

deploy_status:

preprod_url:

deployed_at:

branch:

pr_url:

security_key:

cron-service.js:1826_problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server

severity:

medium

paused:

Description

**Sévérité** : MEDIUM
**Source** : Semgrep
`vuln-medium`
**Emplacement** : cron-service.js:1826
**Règle** : problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server

Checks for any usage of http servers instead of https servers. Encourages the usage of https protocol instead of http, which does not have TLS and is therefore unencrypted. Using http can lead to man-in-the-middle attacks in which the attacker is able to read sensitive information.

### Extrait de code
```
requires login
```

### Lien CVE
https://nodejs.org/api/http.html#http_class_http_agent

History
Notes

CD Updated by Client Dashboard about 1 month ago Actions
Copy link
#1

Vulnérabilité `cron-service.js:1826_problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server` à nouveau détectée par un scan ; ticket déjà ouvert (aucun doublon créé).