Packages

validator

13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed

Upgrading validator From 0.3.5 to 13.15.35

190 releases in betweennotes for 83

Reading releases, release notes and advisories…

Other targets from 0.3.5Newest 0.x0.5.0Clears its 9 advisories13.15.22
3.0.0, 2.0.0, 1.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
  1. 0.3.5yours
  2. 4 releases
  3. 0.4.0major
  4. 26 releases
  5. 0.5.0major
  6. 1.0.0major
  7. 11 releases
  8. 2.0.0major
  9. 1 release
  10. 3.0.0major
  11. 58 releases
  12. 4.0.0major
  13. 4 releases
  14. 4.0.5security
  15. 15 releases
  16. 5.0.0major
  17. 7 releases
  18. 6.0.0major
  19. 4 releases
  20. 7.0.0major
  21. 2 releases
  22. 8.0.0major
  23. 2 releases
  24. 9.0.0major
  25. 6 releases
  26. 9.4.1security
  27. 10.0.0major
  28. 12 releases
  29. 11.0.0major
  30. 1 release
  31. 12.0.0major
  32. 2 releases
  33. 13.0.0major
  34. 7 releases
  35. 13.7.0security
  36. 5 releases
  37. 13.15.20security
  38. 3 releases
  39. 13.15.35target
1+
change to make
9
advisories fixed
397+
new
67+
fixes

Counted from 83 of 190 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking4.1.0

Security

Fixes 9 advisories affecting 0.3.5

  • isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    13.15.20

  • trim: remove regex to prevent ReDOS attack @tux-tn

    13.7.0

  • Patched a REDOS vulnerability in isDataURI

    9.4.1

  • Fixed a denial of service vulnerability in the isEmail() regex

    4.0.5

Release by release

  1. 13.15.35

    2 Apr 20269 new · 3 fixes
    • new

      isISO31661Alpha2/isISO31661Alpha3: add support for Kosovo (XK / XXK)

    • new

      isHexColor: ignore non-object options @yuna0831

    • new

      isTaxID: improve pt-BR locale by adding support for alphanumeric CNPJ format @easedu

    • new

      isTaxID: improve pt-BR locale by adding support for formatted CPF values @easedu

  2. 13.15.26

    18 Dec 20253 new · 1 fix
    • new

      isHexColor: add require_hashtag option @Numbers0689

    • new

      isURL: handle possible bypass with URL-encoded content @WikiRik

    • new

      isIBAN: improve IR locale @ds1371dani

    • fixed

      #2640

  3. 13.15.23

    10 Nov 20251 fix

  4. 13.15.22

    9 Nov 20252 new · 1 fix
    • new

      isURL: fix regression with hostnames with ports @mbtools

    • new

      isLength: improve handling Unicode variation selectors @koral--

    • fixed

      #2621

  5. 13.15.20

    Security fix26 Oct 20254 new · 2 fixes
    • security

      isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    • new

      isMobilePhone: add ar-QA locale @WardKhaddour

    • new

      isAlpha/isAlphanuneric: add Indic locales (ta-IN, te-IN, kn-IN, ml-IN, gu-IN, pa-IN, or-IN)

    • new

      isBase64: improve padding regex @KrayzeeKev

    • new

      isVAT: improve FR locale @iamAmer

    • fixed

      #2563

    • fixed

      #2581

  6. 13.15.15

    28 May 202516 new · 6 fixes
    • new

      isMobilePhone: improve el-CY locale @rezk2ll

    • new

      isMobilePhone: improve pt-AO locale @renaldodev

    • new

      isMobilePhone: improve ar-OM locale @tomcastro

    • new

      isIP: allow usage of option object @pixelbucket-dev

  7. 13.15.0

    24 Mar 202532 new · 12 fixes
    • new

      isISO31661Numeric @RobinvanderVliet

    • new

      isULID @arafatkn

    • new

      isISO15924 @xDivisionByZerox

    • new

      isMobilePhone: add es-GT locale @ignaciosuarezquilis

  8. 13.12.0

    9 May 202417 new · 7 fixes
    • new

      isAbaRouting @songyuew

    • new

      isLicensePlate add Pakistani en-PK locale @anasshakil

    • new

      isPort fix invalid leading zeros @anasshakil

    • new

      isTaxID added Argentina es-AR locale @estefrare

70 other lines we could not sort, mostly version bumps

  • New features: isVAT #1463

    13.5.1

  • New features: isTaxID #1446

    13.5.1

  • New features: isBase58 #1445

    13.5.1

  • New features: isStrongPassword #1348

    13.5.1

  • Fixes and Enhancements: isISO8601: add strictSeparator @brostone51

    13.5.1

  • Fixes and Enhancements: isFQDN: make more strict @CristhianMotoche

    13.5.1

  • Fixes and Enhancements: isFQDN: allow_underscore option @gibson042

    13.5.1

  • Fixes and Enhancements: isEmail: character blacklisting @rubiin

    13.5.1

  • Fixes and Enhancements: isURL: added require_port option @yshanli

    13.5.1

  • Fixes and Enhancements: isEmail: respect ignore_max_length option @evantahler

    13.5.1

5 internal lines (docs, tests, tooling) left out.