validator
13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed
13.15.35 is the newest release of 13.x.
In short
16 new6 fixed
Security
2 advisories affect 13.15.15; 13.15.22 fixes them
- HighValidator is Vulnerable to Incomplete Filtering of One or More Instances of Special ElementsGHSA-vghf-hv5q-vc2g · 27 Nov 2025Fixed in 13.15.22
- Moderatevalidator.js has a URL validation bypass vulnerability in its isURL functionGHSA-9965-vmph-33xx · 30 Sep 2025Fixed in 13.15.20
Release note
Fixes, New Locales and Enhancements
isMobilePhone: improve
el-CYlocale @rezk2llisMobilePhone: improve
pt-AOlocale @renaldodevisMobilePhone: improve
ar-OMlocale @tomcastroisIP: allow usage of option object @pixelbucket-devisPassportNumber: improveCAlocale @evanbechtolisBase64: improve validation based on RFC4648 @aseyfpourisPostalCode: improveFRlocale @Rajput-BalramisBefore: allow usage of option object @pixelbucket-devisRgbColor: allow second digit in rgba alpha value @contrololisIP: improve IPv6 regex @ShreySinha02isPostalCode: addPKlocale @mateeni-devisPostalCode: improveTWlocale @CrocsxisPassportNumber: improveUSlocale @yitzchak-schechterisUUID: addlooseoption @bc-misPostalCode: addBDlocale @tanvirrbisLicensePlate: improvept-PTlocale @castrosuDoc fixes and others: