validator

13.15.35 · 2 Apr 2026MIT35M / weekRepository npm Atom feed

Your version

13.15.20

26 Oct 2025Where it was published

13.15.35 is the newest release of 13.x.

In short

1 security4 new2 fixed

Security

Fixes 1 advisory that affected 13.15.15

Moderate
validator.js has a URL validation bypass vulnerability in its isURL functionGHSA-9965-vmph-33xx · 30 Sep 2025
Fixed in 13.15.20

1 advisory affects 13.15.20; 13.15.22 fixes them

High
Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special ElementsGHSA-vghf-hv5q-vc2g · 27 Nov 2025
Fixed in 13.15.22

Release note

Fixes, New Locales and Enhancements

isMobilePhone: add ar-QA locale @WardKhaddour
isAlpha/isAlphanuneric: add Indic locales (ta-IN, te-IN, kn-IN, ml-IN, gu-IN, pa-IN, or-IN)
isBase64: improve padding regex @KrayzeeKev
isVAT: improve FR locale @iamAmer
security
isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry
Doc fixes and others:
- #2563
- #2581