joi
18.3.1 · 28 Oct 2026BSD-3-Clause34.7M / weekRepositoryHomepagenpmAtom feed
Upgrading joi from 17.8.3 to 18.3.1
41 releases in betweennotes for 0
Reading releases, release notes and advisories…
18.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 5
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 41 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 5 advisories affecting 17.8.3
- joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`high · GHSA-6h2x-m376-mqjq
- joi: Prototype pollution via a `__proto__` language key in custom messageslow · GHSA-6w3j-5fw6-r9vr
- joi: object().rename() with a template target can set the validated object's prototypelow · GHSA-gg4h-3hg2-grpc
- joi has an uncaught RangeError on deeply nested input through recursive `link()` schemasmoderate · GHSA-q7cg-457f-vx79
- joi messages compilation allows prototype replacement through __proto__ error codesmoderate · GHSA-wr44-6hxh-3jwq