Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24025
Reference (s):
- https://github.com/sass/node-sass/pull/567#issuecomment-656609236