joi
18.3.1 · 28 Oct 2026BSD-3-Clause34.7M / weekRepositoryHomepagenpmAtom feed
Upgrading joi from 17.13.9 to 18.0.0
1 release in betweennotes for 0
Reading releases, release notes and advisories…
Other targets from 17.13.9Latest18.3.1
18.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 0
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 1 release notes. Advisories are counted from the advisory database, in full.
Security
5 advisories still affect 18.0.0
- joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`high · GHSA-6h2x-m376-mqjq
- joi: Prototype pollution via a `__proto__` language key in custom messageslow · GHSA-6w3j-5fw6-r9vr
- joi: object().rename() with a template target can set the validated object's prototypelow · GHSA-gg4h-3hg2-grpc
Upgrading to 18.2.9 clears them.