Skip to content

joi has an uncaught RangeError on deeply nested input through recursive link() schemas #193

Closed

Description

@johnwatson484

GHSA-q7cg-457f-vx79

Proposed fix PR created -> #192

Activity

  1. marcuspoehls commented on Jun 16, 2026

    @marcuspoehls
    Member

    Closed by #192

  2. johnwatson484 commented on Jun 16, 2026

    @johnwatson484
    ContributorAuthor

    @marcuspoehls thanks for sorting this so quickly, much appreciated.

    Would it be possible to publish a new version to npmjs.com so we can consume the safe version?

  3. marcuspoehls commented on Jun 16, 2026

    @marcuspoehls
    Member

    @johnwatson484 Hey John, thank you for pinging me! Yes, I can publish a new release tomorrow so that you’re able to use a safe version.

    A question: do you need Node.js support for EOL versions? If you’re on a Node.js LTS version, I may upgrade dependencies and publish a breaking change so that we’re up to date with the package.

  4. johnwatson484 commented on Jun 16, 2026

    @johnwatson484
    ContributorAuthor

    Thanks that would be great.

    Personally, I don't need support for EOL versions.

    We have a large number of teams using it and our standards require teams to use Node LTS. So I'd expect the majority to be 24 with a few stragglers still on 22.

  5. marcuspoehls commented on Jun 16, 2026

    @marcuspoehls
    Member

    Sounds great! Thanks

  6. marcuspoehls commented on Jun 17, 2026

    @marcuspoehls
    Member

    @johnwatson484 Sorry, I may not make it today to publish the new version. I’ve blocked a time slot in my calendar for tomorrow to ensure I don’t get occupied with other tasks

  7. johnwatson484 commented on Jun 17, 2026

    @johnwatson484
    ContributorAuthor

    No worries 😊

  8. marcuspoehls commented on Jun 18, 2026

    @marcuspoehls
    Member

    @johnwatson484 Hey John, I’ve published version 4.0.0 to npm

  9. johnwatson484 commented on Jun 18, 2026

    @johnwatson484
    ContributorAuthor

    That's awesome thanks. I've been able to consume the updates and no longer have outstanding vulnerabilities.

    Thanks for your your help with this! 🚀

  10. marcuspoehls commented on Jun 19, 2026

    @marcuspoehls
    Member

    Awesome!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions