@hapi/joi
17.1.1 · 14 Mar 2020BSD-3-Clause2.1M / weekRepositoryHomepagenpmAtom feed
Deprecated by its maintainers: Switch to 'npm install joi'What to use instead
Upgrading @hapi/joi From 15.0.3 to 17.1.1
18 releases in betweennotes for 0
Reading releases, release notes and advisories…
Other targets from 15.0.3Newest 15.x15.1.1
17.0.0, 16.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
- ?
- changes to make
- 0
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 18 release notes. Advisories are counted from the advisory database, in full.
Security
2 advisories still affect 17.1.1
- joi: quadratic-time split in `string().email({ multiple: true })` allows denial of servicehigh · GHSA-4528-x5fx-h6hg
- joi: Prototype pollution via a `__proto__` language key in custom messageslow · GHSA-6w3j-5fw6-r9vr
No published version clears them all yet.