@hapi/joi
17.1.1 · 14 Mar 2020BSD-3-Clause2.1M / weekRepositoryHomepagenpmAtom feed
Deprecated by its maintainers: Switch to 'npm install joi'What to use instead
Upgrading @hapi/joi From 16.1.5 to 17.1.1
8 releases in betweennotes for 0
Reading releases, release notes and advisories…
Other targets from 16.1.5Newest 16.x16.1.8
17.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 0
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 8 release notes. Advisories are counted from the advisory database, in full.
Security
2 advisories still affect 17.1.1
- joi: quadratic-time split in `string().email({ multiple: true })` allows denial of servicehigh · GHSA-4528-x5fx-h6hg
- joi: Prototype pollution via a `__proto__` language key in custom messageslow · GHSA-6w3j-5fw6-r9vr
No published version clears them all yet.