Skip to content
OpenAdvisories

Product · hapijs

joi

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-48038

    joi: Uncaught RangeError on deeply nested input through recursive `link()` schemas

    joi is a schema description language and data validator for JavaScript. Prior to 17.13.4 and 18.2.1, denial of service is possible via an untrapped exception in services validating user-supplied JSON or object input with recursive link() schemas. When validat…

    hapijs joi katib-suggestion-hyperopt katib-earlystopping Wolfi npm