validator
13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed
Your version
5.7.0 is the newest release of 5.x.
In short
2 new2 fixed
Security
3 advisories affect 5.5.0; 13.15.22 fixes them
- HighValidator is Vulnerable to Incomplete Filtering of One or More Instances of Special ElementsGHSA-vghf-hv5q-vc2g · 27 Nov 2025Fixed in 13.15.22
- Moderatevalidator.js has a URL validation bypass vulnerability in its isURL functionGHSA-9965-vmph-33xx · 30 Sep 2025Fixed in 13.15.20
- ModerateInefficient Regular Expression Complexity in validator.jsGHSA-qgmg-gppg-76g5 · 3 Nov 2021Fixed in 13.7.0
Release note
Fixed a regex denial of service in
trim()andrtrim()Added an Algerian locale to
isMobilePhone()Fixed the Hungarian locale in
isAlpha()andisAlphanumeric()Added a Polish locale to
isMobilePhone()