validator
13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed
13.15.35 is the newest release of 13.x.
In short
17 new2 fixed3 changed1 internal
Security
4 advisories affect 13.1.17; 13.15.22 fixes them
- HighValidator is Vulnerable to Incomplete Filtering of One or More Instances of Special ElementsGHSA-vghf-hv5q-vc2g · 27 Nov 2025Fixed in 13.15.22
- Moderatevalidator.js has a URL validation bypass vulnerability in its isURL functionGHSA-9965-vmph-33xx · 30 Sep 2025Fixed in 13.15.20
- ModerateInefficient Regular Expression Complexity in Validator.jsGHSA-xx4c-jj58-r7x6 · 19 Nov 2021Fixed in 13.7.0
- ModerateInefficient Regular Expression Complexity in validator.jsGHSA-qgmg-gppg-76g5 · 3 Nov 2021Fixed in 13.7.0
Release note
20/09 Release
New features: None
Fixes and chores: fix validation for userinfo part for
isURL@heanzyzabalaFixes and chores: fix
isBase32andisBase64to validate empty strings properly @AberDerBartFixes and chores: tests for
isTaxId@dspinellisFixes and chores: added
validate_lengthoption forisURL@tomgrossmanFixes and chores: add missing tests and switch to Coverall @tux-tn
Fixes and chores: improve code coverage @ezkemboi
Fixes and chores: add Node v6 on build pipeline @profnandaa
New and Improved locales:
isMobilePhone:az-AZ@saidfaganuz-Uz@icyice0217de-DE@heanzyzabalaen-PH@stinkymonkeyphes-ES@rubiinbs-BA@MladenZeljiczh-CN@heathcliff-hu
New and Improved locales:
isPostalCode:AZ@saidfaganES@rubiinIL@rubiin
New and Improved locales:
isAlpha,isAlphanumeric:fa-AF,fa-IR@stinkymonkeyphvi-VN@rubiin
New and Improved locales:
isBAN:EG,SV@heanzyzabala
New and Improved locales:
isIdentityCard:IT@lorenzodb1