unstale

npm / joi

joi

What changed in joi 18, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-27.

5 security

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

joi 185 changes

Security 5

  • joi messages compilation allows prototype replacement through __proto__ error codes

    17.13.8, 18.2.9security advisory

  • joi: Quadratic regular-expression backtracking in Joi.string().isoDate()

    17.13.7, 18.2.6security advisory

  • joi: Prototype pollution via a __proto__ language key in custom messages

    17.13.6, 18.2.5security advisory

  • joi: object().rename() with a template target can set the validated object's prototype

    17.13.5, 18.2.4security advisory

  • joi has an uncaught RangeError on deeply nested input through recursive link() schemas

    17.13.4, 18.2.1security advisory