TI-2026-82716 CVE-2026-118772 · GHSA-4528-x5fx-h6hg
Quadratic-time split in joi email rule allows denial of service
Priority HIGH 72
joi is a schema description language and data validator for JavaScript.
@hapi
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
@hapi records in CISA KEVNo @hapi vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2018-02726 CVE-2018-3728 · GHSA-jp4x-w63m-7wgm
Prototype pollution in @hapi hoek node module
Priority MEDIUM 45
hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the pro…
TI-2014-08224 CVE-2014-10068 · GHSA-g4xp-36c3-f7mr
Path traversal in HackerOne inert node module
Priority LOW 37
The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.
TI-2023-10628 CVE-2023-25166 · GHSA-c2jc-4fpr-4vhg
Regular expression denial of service (ReDoS) in hapijs formula
Priority LOW 30
formula is a math and string formula parser.