All products

@hapi/joi

npm · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
joi: quadratic-time split in `string().email({ multiple: true })` allows denial of serviceCVE-2026-118772 · GHSA-4528-X5FX-H6HG @hapi/joijoi npmRed Hat High Fix reported
joi: Prototype pollution via a `__proto__` language key in custom messagesCVE-2026-84368 · GHSA-6W3J-5FW6-R9VR @hapi/joijoi npmRed Hat Low Fix reported