[ Vendor · 1 CVEs ]
@hapi
CVEs affecting @hapi published in the last 30 days, plus any @hapi CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-118772 | 29 Oct 2026 | CVSS 7.5 | joi: quadratic-time split in `string().email({ multiple: true })` allows denial of servicejoi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string().email({ multiple: true… | Fix |