TI-2026-82716 CVE-2026-118772 · GHSA-4528-x5fx-h6hg
Quadratic-time split in joi email rule allows denial of service
Priority HIGH 72
joi is a schema description language and data validator for JavaScript.
Vulnerabilities
4 records
TI-2023-10628 CVE-2023-25166 · GHSA-c2jc-4fpr-4vhg
Regular expression denial of service (ReDoS) in hapijs formula
Priority LOW 30
formula is a math and string formula parser.
TI-2014-08224 CVE-2014-10068 · GHSA-g4xp-36c3-f7mr
Path traversal in HackerOne inert node module
Priority LOW 37
The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.
TI-2018-02726 CVE-2018-3728 · GHSA-jp4x-w63m-7wgm
Prototype pollution in @hapi hoek node module
Priority MEDIUM 45
hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the pro…