Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
@hapi
@hapi vulnerabilities
Newest
@hapi
joi
joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
CVE-2026-118772
Fix available
7.5
High
October 29, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open