validator
13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed
13.15.35 is the newest release of 13.x.
In short
33 new
Security
4 advisories affect 13.5.0; 13.15.22 fixes them
- HighValidator is Vulnerable to Incomplete Filtering of One or More Instances of Special ElementsGHSA-vghf-hv5q-vc2g · 27 Nov 2025Fixed in 13.15.22
- Moderatevalidator.js has a URL validation bypass vulnerability in its isURL functionGHSA-9965-vmph-33xx · 30 Sep 2025Fixed in 13.15.20
- ModerateInefficient Regular Expression Complexity in Validator.jsGHSA-xx4c-jj58-r7x6 · 19 Nov 2021Fixed in 13.7.0
- ModerateInefficient Regular Expression Complexity in validator.jsGHSA-qgmg-gppg-76g5 · 3 Nov 2021Fixed in 13.7.0
Release note
13.5.0 13.5.1
New features:
Fixes and Enhancements:
isISO8601: addstrictSeparator@brostone51isFQDN: make more strict @CristhianMotocheisFQDN:allow_underscoreoption @gibson042isEmail: character blacklisting @rubiinisURL: addedrequire_portoption @yshanliisEmail: respectignore_max_lengthoption @evantahlerisDate: add strictMode and prevent mixed delimiters @tux-tnisAlpha: supportignoreoption @mum-never-proud
New and Improved locales:
isAlpha,isAlphanumeric:id-IDand docs update @bekicot#1481
th-TH@ipiranhaafa-IR@fakhripaz-AZ@saidfagan
New and Improved locales:
isMobilePhone:ar-MA@artpumpkinde-LU,it-SM,sq-ALandga-IE@firlusen-HN@jehielmartinezar-LB,es-PE,ka-GE@rubiines-DO@devraseces-BO@rubiines-AR@csrgtpt-BR@viniciushvsilva
New and Improved locales:
isPostalCode:CN@httpsbaoSG,MY@stranger26TH@ipiranhaaBY@rubiinDOandHT@yomed
New and Improved locales:
isPassportNumber:BY@zenbyRU@dkochetkov
— this release is dedicated to @dbnandaa 🧒