Sass-Lang Node-Sass vulnerabilities

1 known vulnerability affecting sass-lang/node-sass.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-24025MEDIUMCVSS 5.3≥ 2.0.0, ≤ 4.14.12021-01-11

CVE-2020-24025 [MEDIUM] CWE-295 CVE-2020-24025: Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.