njwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method.
CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')