Hapijs Joi vulnerabilities
- @hapi joi joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service 7.5 High
- hapijs joi Joi before 17.13.7 and 18.2.6 ReDoS via isoDate 8.7 High
- hapijs joi joi before 17.13.8 and 18.2.9 Prototype Pollution via messages 6.3 Medium
- hapijs joi Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 Prototype Replacement via __proto__ Language Key 6.3 Medium
- hapijs joi joi: Prototype pollution via a `__proto__` language key in custom messages 3.7 Low
- hapijs joi joi: object().rename() with a template target can set the validated object's prototype 3.7 Low
- hapijs joi joi: Uncaught RangeError on deeply nested input through recursive `link()` schemas 5.3 Medium