server-hardening
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalyscripts/verify.sh
LOWAnomalyLOW
scripts/verify.sh
The script is primarily a system-hardening verification utility, but it has a command-injection vulnerability through the caller-supplied port arguments. Validate each argument as digits and use a safer connection-checking method that does not interpolate input into a shell command string.
Confidence: 99%Severity: 68%
Audit Metadata