Skip to content
cve.new Create a CVE report

joi

Follow this package

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Behind the package

View on npm

Explore what the publisher declares for the latest npm release. These details are not a safety score; listed attestations have not been independently verified here.

Registry metadata is unavailable. Advisory coverage is shown separately.

Release history

Explore up to 40 recent releases. Pick a version for an OSV check; registry metadata alone does not tell you whether a release has known vulnerabilities.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

joi npm
Affected range Recorded fix
From 17.1.1 before 17.13.9Semantic versions17.13.9

Version evidence: OSV · GHSA-4528-x5fx-h6hg

View original version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "17.1.1"
        },
        {
          "fixed": "17.13.9"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}
joi npm
Affected range Recorded fix
From 18.0.0 before 18.3.1Semantic versions18.3.1

Version evidence: OSV · GHSA-4528-x5fx-h6hg

View original version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "18.0.0"
        },
        {
          "fixed": "18.3.1"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}