npm/joi

joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`

Modified: 10/5/2026

joi: Prototype pollution via a `__proto__` language key in custom messages

Modified: 9/8/2026

joi: object().rename() with a template target can set the validated object's prototype

Modified: 9/8/2026

joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas

Modified: 9/10/2026

joi messages compilation allows prototype replacement through __proto__ error codes

Modified: 10/5/2026