medium5.3
CVE-2020-24025
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.
Impact
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sass-Lang | Node-Sass | from 2.0.0 through 4.14.1 |