Skip to content
OpenAdvisories

Package · npm

njwt

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.9
    CVE-2024-34273

    njwt Prototype Pollution vulnerability

    njwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method.

    njwt npm
  • Low —
    GHSA-g3qw-9pgp-xpj4

    Out-of-bounds Read in njwt

    Versions of `njwt` prior to 1.0.0 are vulnerable to out-of-bounds reads when a number is passed into the `base64urlEncode` function. On Node.js 6.x or lower this can expose sensitive information and on any other version of Node.js this creates a Denial of Ser…

    njwt npm