To check whether Vulnerability assessment scans are supported on a LWC / vLWC
Vulnerability assessment scans failing for LWC / vLWC
The LWC / vLWC is designed as a blackbox. This means you won't be able to login to the shell / console.
For a Vulnerability assessment scan to be performed by a third party scanner, you would need to have the login credentials to the system so that the scanner can login to the system and perform the VA scan. Since the login credentials are not available for LWC / vLWC, a vulnerability assessment scan is not supported.