packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-3309.json"