CVE-2024-34273

Name of the Vulnerable Software and Affected Versions njwt versions up to 0.4.0

Description The issue is related to a prototype pollution in the Parser.prototype.parse method. This method is part of the njwt library, which suggests the pollution occurs during the parsing process, potentially allowing an attacker to modify the prototype of an object.

Recommendations For njwt versions up to 0.4.0, update to a version higher than 0.4.0 to resolve the issue. As a temporary workaround, consider restricting the use of the Parser.prototype.parse method until a patch is available.