validator
13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed
13.15.35 is the newest release of 13.x.
In short
71 new5 fixed3 changed
Security
2 advisories affect 13.9.0; 13.15.22 fixes them
- HighValidator is Vulnerable to Incomplete Filtering of One or More Instances of Special ElementsGHSA-vghf-hv5q-vc2g · 27 Nov 2025Fixed in 13.15.22
- Moderatevalidator.js has a URL validation bypass vulnerability in its isURL functionGHSA-9965-vmph-33xx · 30 Sep 2025Fixed in 13.15.20
Release note
New Features / Validators
Fixes and Enhancements
isBase32: add option for Crockford's base32 alternative @BigOsvaapisDataURI: fix mediaType format @temoffeyisEmail: addhost_whitelistoption @poor-coderisFQDN: fixallow_numeric_tldoption @BigOsvaapisIP: refactor @UnKnoWn-ConsortiumisLength@ikkyu-3isURL: fix check for host @mortbauerisCreditCard@brianwhaleyisAfter: allow usage of option object @WikiRikisRgbColor@pano9000isDataURI: fix MIME types with underscores @pano9000isStrongPassword@sandmuleisISBN: allow usage of option object @WikiRikisEmail: fixignore_max_lengthfor FQDN @sakhmedbayevisFloat: fix comma(,) passing as float @frederike-raminDocumentation fixes:
Code Refactors:
New and Improved Locales
isAlpha, isAlphanumeric:
bn-BD@rak810isAlpha, isAlphanumeric:
si-LK@melkorCBAisAlpha, isAlphanumeric:
ja-JP@starcharlesisAlpha, isAlphanumeric:
ko-KR@DongkyuuuuisBIC:
XK@import-brainisIdentityCard:
hk-HK@DongkyuuuuisMobilePhone:
my-MM, @ferdousulhaqueisMobilePhone:
de-DE, @thomaschaafisMobilePhone:
en-LS, @DevilsAutumnisMobilePhone:
el-CY, @ikerasiotisisMobilePhone:
es-NI, @ajGingrichisMobilePhone:
az-AZ, @shaanaliyevisMobilePhone:
ir-IR, @ArashST79isMobilePhone:
ky-KG, @arsalanfirooziisMobilePhone:
ar-YE,ar-EH,fa-AF, @Mustafiz04isMobilePhone:
ro-MD, @mik7upisMobilePhone:
ar-YE,en-BS, @savannahvaithisMobilePhone:
ka-GE, @avkvakisMobilePhone: #1951
pt-BR, @jhcaiafa @matheusnascgomesisMobilePhone:
es-HN, @ademyan05isMobilePhone:
nl-AW, @adida948isMobilePhone:
en-JM, @ademyan05isMobilePhone:
mn-MN, @rksp25isMobilePhone:
mg-MG, @ShivangiRai1310isMobilePhone:
en-PG, @kai2128isMobilePhone:
en-AG, @jiaweilowisMobilePhone:
en-AI, @elaine1129isMobilePhone:
en-KN, @EelyneeeisMobilePhone:
fr-CD, @coolbeatz71isMobilePhone:
en-SS, @cheboiisMobilePhone:
dv-MV, @pano9000isMobilePhone:
en-HN, @WikiRikisMobilePhone:
el-GR, @pano9000isMobilePhone:
en-BM, @pano9000isMobilePhone:
ms-MY, @pano9000isMobilePhone:
ro-RO, @pano9000isLicensePlate:
sv-SE, @elmaxeisLicensePlate:
hu-HU, @szabolcstarnaiisLicensePlate:
en-NI, @NishantJSisLicensePlate:
de-DE, @bennetfabianisLicensePlate:
de-DE, @bennetfabianisLicensePlate:
es-AR, @alvarocastroisPassportNumber:
JM,KZ,LI,NZ@JuanFMLisPassportNumber:
AZ@djeks922isPassportNumber:
PH,PK@digambar-t7isPostalCode:
BA, @matheusnascgomesisPostalCode:
BY, @pano9000isPostalCode:
IR, @pano9000isTaxID:
en-CA, @boonyaisTaxID:
'AT', 'BE', 'BG', 'HR', 'CY', 'CZ', 'DK', 'EE', 'FI', 'FR', 'DE', 'EL', 'HU', 'IE', 'LV', 'LT', 'LU', 'MT', 'PL', 'PT', 'RO', 'SK', 'SI', 'ES', 'SE', 'AL', 'MK', 'AU', 'BY', 'CA', 'IS', 'IN', 'ID', 'IL', 'KZ', 'NZ', 'NG', 'NO', 'PH', 'RU', 'SM', 'SA', 'RS', 'CH', 'TR', 'UA', 'UZ', 'AR', 'BO', 'BR', 'CL', 'CO', 'CR', 'EC', 'SV', 'GT', 'HN', 'MX', 'NI', 'PA', 'PY', 'PE', 'DO', 'UY', 'VE'@Dev1lDragon