Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download pa...

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

• Debian DEBIAN-CVE-2020-24025 node-node-sass
• Ubuntu UBUNTU-CVE-2020-24025 node-node-sass

References

• advisory github.com