CVE-2020-8172 TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0

Description

TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.

Affected products and versions

Product	Affected versions	Fixed in
https://github.com/nodejs/node	Versions not published

Other CVEs of https://github.com/nodejs/node

The 2 CVEs of https://github.com/nodejs/node →

CVE-2020-8174 napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0 Not rated