valibot

1.5.0 · 9 Sep 2026MIT32M / weekRepository Homepage npm Atom feed

Your version

1.4.2

28 Jun 2026Where it was published

1.5.0 is the newest release of 1.x.

In short

2 fixed

Security

Fixes 1 advisory that affected 1.4.1

Moderate
Valibot: record() issue paths can make flatten() throw for inherited Object property namesGHSA-5qjj-4xww-7phc · 24 Jul 2026
Fixed in 1.4.2

Release note

Many thanks to @Faze-up and @chatman-media for contributing to this release.

Fix word count actions to cache the Intl.Segmenter for non-primitive locales, preventing it from being recreated on every words, minWords, maxWords and notWords validation (pull request #1521)
Fix flatten method to handle issue path keys that collide with Object.prototype members like toString instead of throwing a TypeError (pull request #1522)
Fix intersect schema to merge object keys that collide with Object.prototype members like toString instead of failing to merge them (pull request #1522)