{"action":"Upgrade node-sass to 7.0.0 or later.","affected":[{"fixed":"7.0.0","introduced":"2.0.0"}],"component":"node-sass","cve_ids":["CVE-2020-24025"],"ecosystem":"npm","epss":0.0083,"exploited":false,"fixed_versions":["7.0.0"],"ghsa_id":"GHSA-r8f7-9pfq-mjmv","id":"tcs_01M5KG8FY10A4H8DQ4D6MZTSWV","modified_at":"2023-11-08T04:03:06.466435Z","published_at":"2022-02-09T22:22:24Z","references":["https://osv.dev/vulnerability/GHSA-r8f7-9pfq-mjmv","https://nvd.nist.gov/vuln/detail/CVE-2020-24025","https://github.com/sass/node-sass/issues/3067","https://github.com/sass/node-sass/pull/3149","https://github.com/sass/node-sass/pull/567#issuecomment-656609236","https://github.com/sass/node-sass/commit/0a21792803639851b480fbd8cbcb5540ef974387","https://github.com/sass/node-sass","https://github.com/sass/node-sass/releases/tag/v7.0.0"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-r8f7-9pfq-mjmv","url":"https://osv.dev/vulnerability/GHSA-r8f7-9pfq-mjmv"}],"summary":"Improper Certificate Validation in node-sass"}