joi
18.3.1 · 28 Oct 2026BSD-3-Clause34.7M / weekRepositoryHomepagenpmAtom feed
Your version
18.2.4
19 Aug 202618.3.1 is the newest release of 18.x.
Security
Fixes 1 advisory that affected 18.2.3
- Lowjoi: object().rename() with a template target can set the validated object's prototypeGHSA-gg4h-3hg2-grpc · 8 Sep 2026Fixed in 18.2.4
3 advisories affect 18.2.4; 18.2.9 fixes them
- Highjoi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`GHSA-6h2x-m376-mqjq · 29 Sep 2026Fixed in 18.2.6
- Moderatejoi messages compilation allows prototype replacement through __proto__ error codesGHSA-wr44-6hxh-3jwq · 13 Sep 2026Fixed in 18.2.9
- Lowjoi: Prototype pollution via a `__proto__` language key in custom messagesGHSA-6w3j-5fw6-r9vr · 8 Sep 2026Fixed in 18.2.5
Release note
No note was found for 18.2.4 on GitHub or in the repository's changelog.