@hapi/joi
17.1.1 · 14 Mar 2020BSD-3-Clause2.1M / weekRepositoryHomepagenpmAtom feed
Deprecated by its maintainers: Switch to 'npm install joi'What to use instead
Your version
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
| Line | Newest | Where it stands |
|---|---|---|
| 17.1.1 | 2 open advisories, worst high | |
| 16.1.8 | 2 open advisories, worst high · last release Nov 2019, no longer updated |
- Highjoi: quadratic-time split in `string().email({ multiple: true })` allows denial of serviceGHSA-4528-x5fx-h6hg · 30 Oct 2026no fix on 17.x yet
- Lowjoi: Prototype pollution via a `__proto__` language key in custom messagesGHSA-6w3j-5fw6-r9vr · 8 Sep 2026no fix on 17.x yet
Registry facts last checked 4 Nov 2026. Releases and advisories last read 4 Nov 2026.