validator

13.15.35 · 2 Apr 2026MIT35M / weekRepository npm Atom feed

Your version

10.5.0

3 Aug 2018Where it was published

10.11.0 is the newest release of 10.x.

In short

4 new2 changed

Security

3 advisories affect 10.5.0; 13.15.22 fixes them

High
Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special ElementsGHSA-vghf-hv5q-vc2g · 27 Nov 2025
Fixed in 13.15.22
Moderate
validator.js has a URL validation bypass vulnerability in its isURL functionGHSA-9965-vmph-33xx · 30 Sep 2025
Fixed in 13.15.20
Moderate
Inefficient Regular Expression Complexity in validator.jsGHSA-qgmg-gppg-76g5 · 3 Nov 2021
Fixed in 13.7.0

Release note

Disabled domain-specific email validation
Added support for IP hostnames in isEmail()
Added a no_symbols option to isNumeric()
Added a no_colons option to isMACAddress()
Updated isURL() to reject protocol relative URLs unless a flag is set
New and improved locales
(#801,
#856,
#859,
#861,
#862,
#863,
#864,
#870,
#872)