CVE-2024-34273

jwtk · Jun 6, 2024 · 9e132d5 · 9e132d5
1 parent 01aa78a
commit 9e132d5
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # nJwt Change Log
 
+### 2.0.1
+
+* [#107](https://github.com/jwtk/njwt/pull/107) Freeze `prototype` of all classes to prevent prototype pollution vuln ([CVE-2024-34273](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-34273))
+
 ### 2.0.0
 
 * [#98](https://github.com/jwtk/njwt/pull/98) Bumps jsonwebtoken version, drop Node < 12 from engines

diff --git a/index.js b/index.js
@@ -263,9 +263,6 @@ Jwt.prototype.compact = function compact() {
 };
 
 Jwt.prototype.toString = function(){
-  if (this.__originalString) {
-    return this.__originalString;
-  }
   return this.compact();
 };