JO
Product
joi
by @hapi · last CVE Oct 29, 2026
1
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add joi to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-118772
New
7.5–Oct 29
joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
Affected: >= 16.0.0, <= 17.1.1
Showing 1