OSV security advisoryHigh
High advisory for joi
ROOT-APP-NPM-CVE-2026-118772 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
joiAffected product
Advisory overview
Root has patched CVE-2026-118772 in the joi package for Root:npm. Multiple fixed versions available.
Affected packages and releases
Root:npm / joi
introduced: 0 · fixed: 18.2.9-aikido.1
Root:npm / @rootio/joi
introduced: 0 · fixed: 18.2.9-root.io.1
