Hapijs / Joi
5 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-92599 | Joi before 17.13.7 and 18.2.6 ReDoS via isoDate | HIGH | 8.7 | Sep 16, 2026 |
| CVE-2026-90771 | joi before 17.13.8 and 18.2.9 Prototype Pollution via messages | MEDIUM | 6.3 | Sep 13, 2026 |
| CVE-2026-84368 | joi: Prototype pollution via a `__proto__` language key in custom messages | LOW | 3.7 | Sep 1, 2026 |
| CVE-2026-84367 | joi: object().rename() with a template target can set the validated object's prototype | LOW | 3.7 | Sep 1, 2026 |
| CVE-2026-48038 | joi: Uncaught RangeError on deeply nested input through recursive `link()` schemas | MEDIUM | 5.3 | Jul 14, 2026 |
Showing 1 to 5 of 5 CVEs