validator
13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed
13.15.35 is the newest release of 13.x.
In short
32 new12 fixed
Security
2 advisories affect 13.15.0; 13.15.22 fixes them
- HighValidator is Vulnerable to Incomplete Filtering of One or More Instances of Special ElementsGHSA-vghf-hv5q-vc2g · 27 Nov 2025Fixed in 13.15.22
- Moderatevalidator.js has a URL validation bypass vulnerability in its isURL functionGHSA-9965-vmph-33xx · 30 Sep 2025Fixed in 13.15.20
Release note
Thanks to @WikiRik for prepping the release <3
New Features / Validators
isISO31661Numeric@RobinvanderVlietisULID@arafatknisISO15924@xDivisionByZerox
Fixes, New Locales and Enhancements
isMobilePhone: add
es-GTlocale @ignaciosuarezquilisisMobilePhone: improve
en-GBlocale @ihmpavelisMobilePhone: improve
uk-UAlocale @arttigerisMobilePhone: improve
ky-KGlocale @sadralievisMobilePhone: improve
en-ZMlocale @sonikishanisMobilePhone: improve
en-GHlocale @NanaAb-116isMobilePhone: add
mk-MKlocale @eshward95isMobilePhone: improve
sq-ALlocale @nichoolaisBtcAddresssupport all address formats and testnets @madokeisIBANimproveVGregex @ST-DDTisISO4217update currency codes @cbodtorfisIdentityCardaddPKlocale @Daniyal-QureshiisEmailfix blacklist_chars @keshavlingalaisInt/isFloathandle undefined and null values @Daniyal-QureshiisPostalCodeaddCOlocale @jorgevrgsisPassportNumberexportpassportNumberLocales@derekparnellisRgbColoraddallowSpacesoption @a-h-iisUUIDrequire valid variant field and require RFC9562 UUID in versionall@broofaisURLaddmax_allowed_lengthoption @pinkieskyisEmailreject starting with double quotes @code0emperorisLicensePlateadden-SGlocale @Sabarinathan07normalizeEmailaddyandex_convert_yandexruoption @AayushGHisDatereturn false instead of Error in certain cases @pano9000isLengthadddiscreteLengthsoption @Suven-pisDatedisallow mismatching length instrictMode@sonikishanisISO6346set check digit to 0 if remainder is 10 @joelcuyisPostalCodeimproveBRlocale @ticmaisdevisEmailallow regexp inhost_whitelistandhost_blacklist@weikangchiaisIBANimproveIE/PSregex @Tarasz57Doc fixes and others: