validator
13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed
Your version
10.11.0 is the newest release of 10.x.
In short
4 new1 fixed3 changed
Security
3 advisories affect 10.0.0; 13.15.22 fixes them
- HighValidator is Vulnerable to Incomplete Filtering of One or More Instances of Special ElementsGHSA-vghf-hv5q-vc2g · 27 Nov 2025Fixed in 13.15.22
- Moderatevalidator.js has a URL validation bypass vulnerability in its isURL functionGHSA-9965-vmph-33xx · 30 Sep 2025Fixed in 13.15.20
- ModerateInefficient Regular Expression Complexity in validator.jsGHSA-qgmg-gppg-76g5 · 3 Nov 2021Fixed in 13.7.0
Release note
Allow floating points in
isNumeric()Disallow GMail addresses with multiple consecutive dots, or leading/trailing dots
Added an
isRFC3339()validatorReject domain parts longer than 63 octets in
isFQDN(),isURL()andisEmail()Added a new Amex prefix to
isCreditCard()Fixed
isFloat()min/max/gt/lt filters when a locale with a comma decimal is usedNormalize Yandex emails
New locales