4 matches found
@okta/jwt-verifier (3.2.1) potentially affected by CVE-2024-34273 via njwt (2.0.0)
njwt NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on njwt and may be impacted: - @okta/jwt-verifier 3.2.1 Source cves: CVE-2024-34273 Source advisory: OSV:GHSA-3HVJ-2783-34X2...
CVE-2024-34273
njwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method...
CVE-2024-34273
CVE-2024-34273 affects njwt up to v0.4.0, with a prototype pollution flaw in Parser.prototype.parse. Public records consistently identify the issue as this library’s Parser.parse pollution vector, not a general exploit chain. CVSS metrics document Network access, high complexity, and no privilege...
