joi
18.3.1 · 28 Oct 2026BSD-3-Clause34.7M / weekRepositoryHomepagenpmAtom feed
Upgrading joi from 17.9.1 to 17.13.9
20 releases in betweennotes for 0
Reading releases, release notes and advisories…
- ?
- changes to make
- 5
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 20 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 5 advisories affecting 17.9.1
- joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`high · GHSA-6h2x-m376-mqjq
- joi: Prototype pollution via a `__proto__` language key in custom messageslow · GHSA-6w3j-5fw6-r9vr
- joi: object().rename() with a template target can set the validated object's prototypelow · GHSA-gg4h-3hg2-grpc
- joi has an uncaught RangeError on deeply nested input through recursive `link()` schemasmoderate · GHSA-q7cg-457f-vx79
- joi messages compilation allows prototype replacement through __proto__ error codesmoderate · GHSA-wr44-6hxh-3jwq