joi
18.3.1 · 28 Oct 2026BSD-3-Clause34.7M / weekRepositoryHomepagenpmAtom feed
Upgrading joi from 17.13.5 to 17.13.6
1 release in betweennotes for 0
Reading releases, release notes and advisories…
- ?
- changes to make
- 1
- advisory fixed
- ?
- new
- ?
- fixes
Counted from 0 of 1 release notes. Advisories are counted from the advisory database, in full.
Security
2 advisories still affect 17.13.6
- joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`high · GHSA-6h2x-m376-mqjq
- joi messages compilation allows prototype replacement through __proto__ error codesmoderate · GHSA-wr44-6hxh-3jwq
Upgrading to 17.13.8 clears them.
Fixes 1 advisory affecting 17.13.5
- joi: Prototype pollution via a `__proto__` language key in custom messageslow · GHSA-6w3j-5fw6-r9vr