Found a CVE. Do we go the stricter route for local tests and regenerate the

localhost

cert or set

JSSE_HOSTNAME_CHECK_CN_FALLBACK

to

true

as per github.com/advisories/ghsa-8rxj-3p7p-rq39?