A vulnerability classified as problematic has been found in njwt up to 0.4.0. This affects the function
Parser.prototype.parse
. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).
This vulnerability is uniquely identified as CVE-2024-34273. It is possible to initiate the attack remotely. There is no exploit available.