@hapi vulnerabilities
We track 1 vulnerability in @hapi products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest @hapi vulnerabilities
- 7.5 High severity
joi: Inefficient Regular Expression Complexity
joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string().email({ multiple: true }) rule uses a separator regular expression whose leading whitespace quantifier is retried at every position i