joi messages compilation allows prototype replacement through __proto__ error codes
npm joi · Upgrade to 18.2.9 or 17.13.8 by release line · < 17.13.8; >= 18.0.0, < 18.2.9 · CVE-2026-90771 · GHSA-wr44-6hxh-3jwq · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–1 of 1 matching · newest first
npm joi · Upgrade to 18.2.9 or 17.13.8 by release line · < 17.13.8; >= 18.0.0, < 18.2.9 · CVE-2026-90771 · GHSA-wr44-6hxh-3jwq · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.