joi vulnerabilities (npm)
7 vulnerabilities.
-
joinpm joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service 7.5 High -
joinpm Joi before 17.13.7 and 18.2.6 ReDoS via isoDate 8.7 High -
joinpm joi before 17.13.8 and 18.2.9 Prototype Pollution via messages 6.3 Medium -
joinpm Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 Prototype Replacement via __proto__ Language Key 6.3 Medium -
joinpm joi: Prototype pollution via a `__proto__` language key in custom messages 3.7 Low -
joinpm joi: object().rename() with a template target can set the validated object's prototype 3.7 Low -
joinpm joi: Uncaught RangeError on deeply nested input through recursive `link()` schemas 5.3 Medium