{"action":"Upgrade njwt to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"0"}],"component":"njwt","cve_ids":["CVE-2024-34273"],"ecosystem":"npm","epss":0.00488,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-3hvj-2783-34x2","id":"tcs_01M5KEXFT2198GAV4W2VTC3KE6","modified_at":"2024-11-18T16:26:42Z","published_at":"2024-05-16T18:30:31Z","references":["https://osv.dev/vulnerability/GHSA-3hvj-2783-34x2","https://nvd.nist.gov/vuln/detail/CVE-2024-34273","https://github.com/jwtk/njwt/issues/105","https://github.com/jwtk/njwt/commit/ec9483b6eec1150d56f772ddd308c2bbdf2f98f4","https://github.com/chrisandoryan/vuln-advisory/blob/main/nJwt/CVE-2024-34273.md","https://github.com/jwtk/njwt"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-3hvj-2783-34x2","url":"https://osv.dev/vulnerability/GHSA-3hvj-2783-34x2"}],"summary":"njwt Prototype Pollution vulnerability"}