joi
18.3.1 · 28 Oct 2026BSD-3-Clause34.7M / weekRepositoryHomepagenpmAtom feed
Upgrading joi from 18.2.3 to 18.2.4
1 release in betweennotes for 0
Reading releases, release notes and advisories…
- ?
- changes to make
- 1
- advisory fixed
- ?
- new
- ?
- fixes
Counted from 0 of 1 release notes. Advisories are counted from the advisory database, in full.
Security
3 advisories still affect 18.2.4
- joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`high · GHSA-6h2x-m376-mqjq
- joi: Prototype pollution via a `__proto__` language key in custom messageslow · GHSA-6w3j-5fw6-r9vr
- joi messages compilation allows prototype replacement through __proto__ error codesmoderate · GHSA-wr44-6hxh-3jwq
Upgrading to 18.2.9 clears them.
Fixes 1 advisory affecting 18.2.3
- joi: object().rename() with a template target can set the validated object's prototypelow · GHSA-gg4h-3hg2-grpc