JO
Product
joi
6
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 1Low 3
Watch
Add joi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-118772 New | 7.5 | Oct 29 | joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service Affected: >= 16.0.0, <= 17.1.1; >= 18.0.0, < 18.3.1 |
| CVE-2026-92599 | 7.5 | Sep 16 | Joi before 17.13.7 and 18.2.6 ReDoS via isoDate Affected: 17.2.0 before 17.13.7; 18.0.0 before 18.2.6 |
Showing 2