CVE-2020-24025

Publication date

2021-01-11 18:14:41

Family

mitre

State

PUBLISHED

Description

Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.