validator
13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed
Your version
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
| Line | Newest | Where it stands |
|---|---|---|
| 13.15.35 | Safe from 13.15.22 | |
| 12.2.0 | 86 open advisories, worst high · last release Jan 2020, no longer updated |
- HighValidator is Vulnerable to Incomplete Filtering of One or More Instances of Special ElementsGHSA-vghf-hv5q-vc2g · 27 Nov 2025fixed in 13.15.22
- HighRegular Expression Denial of Service in validatorGHSA-f5w6-r7rg-mcgq · 31 Aug 2020fixed in 3.22.1
- Moderatevalidator.js has a URL validation bypass vulnerability in its isURL functionGHSA-9965-vmph-33xx · 30 Sep 2025fixed in 13.15.20
- ModerateInefficient Regular Expression Complexity in Validator.jsGHSA-xx4c-jj58-r7x6 · 19 Nov 2021fixed in 13.7.0
- ModerateInefficient Regular Expression Complexity in validator.jsGHSA-qgmg-gppg-76g5 · 3 Nov 2021fixed in 13.7.0
- ModerateXSS Filter Bypass via Encoded URL in validatorGHSA-79mx-88w7-8f7q · 6 Nov 2018
- ModerateModerate severity vulnerability that affects validatorGHSA-552w-rqg8-gxxm · 24 Oct 2017fixed in 1.1.0
- ModerateMultiple XSS Filter Bypasses in validatorGHSA-q4qq-fm7q-cwp5 · 24 Oct 2017fixed in 1.1.0
- ModerateModerate severity vulnerability that affects validatorGHSA-qpjp-7rp2-9c3f · 24 Oct 2017fixed in 1.1.0
- ModerateModerate severity vulnerability that affects validatorGHSA-rh6c-q938-3r9q · 24 Oct 2017fixed in 1.1.0
Reading releases, release notes and advisories…
Registry facts last checked 4 Nov 2026. Releases and advisories last read 4 Nov 2026.