@hapi Joi vulnerabilities

• @hapi joi joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service CVE-2026-118772 Fix available 7.5 HighOctober 29, 2026