joi
18.3.1 · 28 Oct 2026BSD-3-Clause34.7M / weekRepositoryHomepagenpmAtom feed
Upgrading joi from 17.13.4 to 17.13.9
5 releases in betweennotes for 0
Reading releases, release notes and advisories…
- ?
- changes to make
- 4
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 5 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 4 advisories affecting 17.13.4
- joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`high · GHSA-6h2x-m376-mqjq
- joi: Prototype pollution via a `__proto__` language key in custom messageslow · GHSA-6w3j-5fw6-r9vr
- joi: object().rename() with a template target can set the validated object's prototypelow · GHSA-gg4h-3hg2-grpc
- joi messages compilation allows prototype replacement through __proto__ error codesmoderate · GHSA-wr44-6hxh-3jwq