Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-6w3j-5fw6-r9vr
  • npm/@hapi/joi
  • npm/joi
 joi: Prototype pollution via a `__proto__` language key in custom messages 08 Sep
  • Fix available
  • Severity - 3.7 (Low)
GHSA-gg4h-3hg2-grpc
  • npm/joi
 joi: object().rename() with a template target can set the validated object's prototype 08 Sep
  • Fix available
  • Severity - 3.7 (Low)
GHSA-q7cg-457f-vx79
  • npm/joi
 joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas 11 Jun
  • Fix available
  • Severity - 5.3 (Medium)
MAL-2026-3765
  • npm/joi-pack
 Malicious code in joi-pack (npm) 14 May
  • No fix available
MAL-2025-175719
  • npm/kupaio-kula-joi
 Malicious code in kupaio-kula-joi (npm) 12 Nov 2025
  • No fix available