The product does not correctly validate a certificate chain, host name, or expiry.
Use platform TLS validation as-is; never disable verification, pin only with rotation plans.
MITRE ATT&CK techniques associated with this weakness class (mapped via MITRE CAPEC). A vulnerability of this type could let an adversary carry out:
Security vulnerability in node-sass
Security vulnerability in node-sass
Security vulnerability in xmlhttprequest-ssl
Security vulnerability in boundary
Security vulnerability in cryptography
Security vulnerability in cryptography
Security vulnerability in cryptography
Security vulnerability in cryptography
Security vulnerability in undici
Security vulnerability in undici
Security vulnerability in undici
Security vulnerability in undici
Security vulnerability in axel
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in curl
Security vulnerability in curl
Security vulnerability in curl
Security vulnerability in curl
Security vulnerability in curl
Security vulnerability in undici
Security vulnerability in cryptography
Security vulnerability in cryptography
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in openssl
Security vulnerability in aria2
Security vulnerability in cryptography
Security vulnerability in cryptography
Security vulnerability in undici
Security vulnerability in undici