@hapi/joi
17.1.1 · 14 Mar 2020BSD-3-Clause2.1M / weekRepositoryHomepagenpmAtom feed
Deprecated by its maintainers: Switch to 'npm install joi'What to use instead
Upgrading @hapi/joi From 16.1.8 to 17.1.1
5 releases in betweennotes for 0
Reading releases, release notes and advisories…
17.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 0
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 5 release notes. Advisories are counted from the advisory database, in full.
Security
2 advisories still affect 17.1.1
- joi: quadratic-time split in `string().email({ multiple: true })` allows denial of servicehigh · GHSA-4528-x5fx-h6hg
- joi: Prototype pollution via a `__proto__` language key in custom messageslow · GHSA-6w3j-5fw6-r9vr
No published version clears them all yet.