Описание
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| node-node-sass | fixed | 7.0.1+git20211229.3bb51da+dfsg-1 | package | |
| node-node-sass | ignored | bullseye | package |
Примечания
https://github.com/sass/node-sass/pull/567#issuecomment-656609236
https://github.com/sass/node-sass/issues/3067
Связанные уязвимости
CVSS3: 5.3
ubuntu
около 5 лет назад
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.
CVSS3: 5.3
redhat
около 5 лет назад
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.
CVSS3: 5.3
nvd
около 5 лет назад
Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.
