@hapi/joi vulnerabilities

CVEs whose affected-version data names the @hapi/joi package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-84368Low· 3.7

3w ago

joi is a schema description language and data validator for JavaScript

joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/joi package through 17.1.1 and the successor joi package contain prototype pollution in lib/messages.js, where export…

▾ Sunlitjoi · joiEPSS 0.26%via NVD