CVE-2026-90771 | hapijs Joi up to 17.13.7/18.2.8 Messages Messages Compilation __proto__ prototype pollution

A vulnerability was found in hapijs Joi up to 17.13.7/18.2.8. It has been classified as critical. This issue affects the function Messages Compilation of the component Messages. Performing a manipulation of the argument __proto__ results in improperly controlled modification of object prototype attributes.

This vulnerability is known as CVE-2026-90771. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More