njwt Prototype Pollution vulnerability

Description

njwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method.

Recommendation

Update the njwt package to the latest compatible version. Followings are version details:

• Affected version(s): < 2.0.1
• Patched version(s): 2.0.1

References

• GHSA-3hvj-2783-34x2
• CVE-2024-34273
• CWE-1321
• CAPEC-310
• OWASP 2021-A6

Related Issues

• @intlify/shared Prototype Pollution vulnerability - CVE-2024-52810
• @intlify/shared Prototype Pollution vulnerability (GHSA-hjwq-mjwj-4x6c) - CVE-2024-52810
• @intlify/shared Prototype Pollution vulnerability (GHSA-hjwq-mjwj-4x6c) 3 - CVE-2024-52810
• @intlify/shared Prototype Pollution vulnerability (GHSA-hjwq-mjwj-4x6c) 2 - CVE-2024-52810

Tags:

npm

njwt