--- /src/socket.cpp
+++ /src/socket.cpp
@@ -60,12 +60,12 @@
 int socket::bind(const std::string& address)
 {
     // format-security: format not a string literal and no format arguments.
-    return zsocket_bind(self_, address.c_str());
+    return zsocket_bind(self_, "%s", address.c_str());
 }
 int socket::connect(const std::string& address)
 {
     // format-security: format not a string literal and no format arguments.
-    return zsocket_connect(self_, address.c_str());
+    return zsocket_connect(self_, "%s", address.c_str());
 }

 bool operator==(const socket& sock_a, const socket& sock_b)