CVE-2020-24025

Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path

published January 11, 2021

CVSS
—
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00830 · 57.1th percentile
Published
2021-01-11T18:14Z
EPSS history
Timeline
  • 11 JAN 18:14Z
    Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path
    cvelistv5