vetkit.resilience.http-call-without-timeout.py-timeout-disabled
$CALL explicitly disables the client's timeout. httpx and aiohttp time out by default; turning that off lets a single slow or unresponsive upstream hold the request open indefinitely.
Last updated:
Suite: Production readiness
python
$CALL explicitly disables the client's timeout. httpx and aiohttp time out by default; turning that off lets a single slow or unresponsive upstream hold the request open indefinitely.
Category: RESILIENCE · Engine rule severity: WARNING
How to fix it
Use a finite timeout. For long downloads or streaming responses keep the connect timeout and set a generous read timeout (httpx.Timeout(10.0, read=300.0), aiohttp.ClientTimeout(sock_connect=10, sock_read=300)) instead of disabling every limit.
References
Source: packages/engine/rules/resilience/python.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.