vetkit.js.tls.weak-protocol-version
TLS is configured to allow SSLv3, TLS 1.0 or TLS 1.1. These deprecated protocol versions are vulnerable to known downgrade and decryption attacks.
Last updated:
Suite: Security
javascript, typescript
TLS is configured to allow SSLv3, TLS 1.0 or TLS 1.1. These deprecated protocol versions are vulnerable to known downgrade and decryption attacks.
Category: SECURITY · Engine rule severity: WARNING
How to fix it
Require TLS 1.2 or newer: minVersion: 'TLSv1.2' and drop secureProtocol overrides.
References
Source: packages/engine/rules/sast/javascript.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.