Browse all 11 CVE security advisories affecting hapijs. AI-powered Chinese analysis, POCs, and references for each vulnerability.
This page aggregates security vulnerabilities reported for hapijs, a JavaScript framework for building APIs and applications. It collects known security flaws and their associated advisories within the tracked reporting period. Visitors can use this section to monitor the vendor's security posture, review specific product weakness patterns, and examine the historical vulnerability trends of the hapijs ecosystem.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-92599 | Joi before 17.13.7 and 18.2.6 ReDoS via isoDate — joi CWE-1333 | 7.5 | High | 2026-09-16 |
| CVE-2026-90771 | joi before 17.13.8 and 18.2.9 Prototype Pollution via messages — joi CWE-1321 | 3.7 | Low | 2026-09-13 |
| CVE-2026-84368 | joi: Prototype pollution via a `__proto__` language key in custom messages — joi CWE-1321 | 3.7 | Low | 2026-09-01 |
| CVE-2026-84367 | joi: object().rename() with a template target can set the validated object's prototype — joi CWE-1321 | 3.7 | Low | 2026-09-01 |
| CVE-2026-48038 | joi: Uncaught RangeError on deeply nested input through recursive `link()` schemas — joi CWE-248 | 5.3 | Medium | 2026-07-14 |
This page lists every published CVE security advisory associated with hapijs. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.