A vulnerability classified as problematic has been found in njwt up to 0.4.0. This affects the function Parser.prototype.parse. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).

This vulnerability is uniquely identified as CVE-2024-34273. It is possible to initiate the attack remotely. There is no exploit available.