Project

General

Profile

Actions

SecOps #570

open
CD

[Sécurité] Vulnérabilité de code : healthcheck.js:3 (problem-based-packs.insecure-transport.js-node.http-request.http-request)

SecOps #570: [Sécurité] Vulnérabilité de code : healthcheck.js:3 (problem-based-packs.insecure-transport.js-node.http-request.http-request)

Added by Client Dashboard about 2 months ago. Updated 12 days ago.

Status:
Submitted
Priority:
Normal
Assignee:
-
Start date:
06/15/2026
Due date:
% Done:

0%

Estimated time:
spec_ref:
build_status:
build_number:
ci_run_url:
scan_status:
scan_report_url:
deploy_status:
preprod_url:
deployed_at:
branch:
pr_url:
security_key:
healthcheck.js:3_problem-based-packs.insecure-transport.js-node.http-request.http-request
severity:
medium
paused:

Description

**Sévérité** : MEDIUM
**Source** : Semgrep
`vuln-medium`
**Emplacement** : healthcheck.js:3
**Règle** : problem-based-packs.insecure-transport.js-node.http-request.http-request

Checks for requests sent to http:// URLs. This is dangerous as the server is attempting to connect to a website that does not encrypt traffic with TLS. Instead, only send requests to https:// URLs.

### Extrait de code
```
requires login
```

### Lien CVE
https://nodejs.org/api/http.html#http_http_request_options_callback

Actions

Also available in: PDF Atom