Packages

validator

13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed

Upgrading validator From 0.4.1 to 13.15.22

181 releases in betweennotes for 80

Reading releases, release notes and advisories…

Other targets from 0.4.1Newest 0.x0.5.0Latest13.15.35
3.0.0, 2.0.0, 1.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
  1. 0.4.1yours
  2. 25 releases
  3. 0.5.0major
  4. 1.0.0major
  5. 11 releases
  6. 2.0.0major
  7. 1 release
  8. 3.0.0major
  9. 58 releases
  10. 4.0.0major
  11. 4 releases
  12. 4.0.5security
  13. 15 releases
  14. 5.0.0major
  15. 7 releases
  16. 6.0.0major
  17. 4 releases
  18. 7.0.0major
  19. 2 releases
  20. 8.0.0major
  21. 2 releases
  22. 9.0.0major
  23. 6 releases
  24. 9.4.1security
  25. 10.0.0major
  26. 12 releases
  27. 11.0.0major
  28. 1 release
  29. 12.0.0major
  30. 2 releases
  31. 13.0.0major
  32. 7 releases
  33. 13.7.0security
  34. 5 releases
  35. 13.15.20security
  36. 13.15.22target
1+
change to make
9
advisories fixed
385+
new
62+
fixes

Counted from 80 of 181 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking4.1.0

Security

Fixes 9 advisories affecting 0.4.1

  • isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    13.15.20

  • trim: remove regex to prevent ReDOS attack @tux-tn

    13.7.0

  • Patched a REDOS vulnerability in isDataURI

    9.4.1

  • Fixed a denial of service vulnerability in the isEmail() regex

    4.0.5

Release by release

  1. 13.15.22

    9 Nov 20252 new · 1 fix
    • new

      isURL: fix regression with hostnames with ports @mbtools

    • new

      isLength: improve handling Unicode variation selectors @koral--

    • fixed

      #2621

  2. 13.15.20

    Security fix26 Oct 20254 new · 2 fixes
    • security

      isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    • new

      isMobilePhone: add ar-QA locale @WardKhaddour

    • new

      isAlpha/isAlphanuneric: add Indic locales (ta-IN, te-IN, kn-IN, ml-IN, gu-IN, pa-IN, or-IN)

    • new

      isBase64: improve padding regex @KrayzeeKev

    • new

      isVAT: improve FR locale @iamAmer

    • fixed

      #2563

    • fixed

      #2581

  3. 13.15.15

    28 May 202516 new · 6 fixes
    • new

      isMobilePhone: improve el-CY locale @rezk2ll

    • new

      isMobilePhone: improve pt-AO locale @renaldodev

    • new

      isMobilePhone: improve ar-OM locale @tomcastro

    • new

      isIP: allow usage of option object @pixelbucket-dev

  4. 13.15.0

    24 Mar 202532 new · 12 fixes
    • new

      isISO31661Numeric @RobinvanderVliet

    • new

      isULID @arafatkn

    • new

      isISO15924 @xDivisionByZerox

    • new

      isMobilePhone: add es-GT locale @ignaciosuarezquilis

  5. 13.12.0

    9 May 202417 new · 7 fixes
    • new

      isAbaRouting @songyuew

    • new

      isLicensePlate add Pakistani en-PK locale @anasshakil

    • new

      isPort fix invalid leading zeros @anasshakil

    • new

      isTaxID added Argentina es-AR locale @estefrare

  6. 13.11.0

    4 Aug 202319 new
    • new

      isFreightContainerID: for shipping containers IDs @songyuew

    • new

      isMailtoURI @uksarkar

    • new

      isIBAN add MA locale @lroudge

    • new

      isCreditCard refactor @pano9000

  7. 13.9.0

    2 Feb 202371 new · 5 fixes
    • new

      isISO6391: add ISO 639-1 validator @braaar

    • new

      isLuhnNumber @ST-DDT

    • new

      isMACAddress: add EUI-validation @WikiRik @tux-tn

    • new

      isBase32: add option for Crockford's base32 alternative @BigOsvaap

  8. 13.7.0

    Security fix1 Nov 202158 new · 1 fix
    • security

      trim: remove regex to prevent ReDOS attack @tux-tn

    • new

      isISO4217, currency code validator @jpaya17

    • new

      isFQDN: add allow_wildcard option @fasenderos

    • new

      isRFC3339: Disallow prepended and appended strings to RFC 3339 date-time @jmacmahon

70 other lines we could not sort, mostly version bumps

  • New features: isVAT #1463

    13.5.1

  • New features: isTaxID #1446

    13.5.1

  • New features: isBase58 #1445

    13.5.1

  • New features: isStrongPassword #1348

    13.5.1

  • Fixes and Enhancements: isISO8601: add strictSeparator @brostone51

    13.5.1

  • Fixes and Enhancements: isFQDN: make more strict @CristhianMotoche

    13.5.1

  • Fixes and Enhancements: isFQDN: allow_underscore option @gibson042

    13.5.1

  • Fixes and Enhancements: isEmail: character blacklisting @rubiin

    13.5.1

  • Fixes and Enhancements: isURL: added require_port option @yshanli

    13.5.1

  • Fixes and Enhancements: isEmail: respect ignore_max_length option @evantahler

    13.5.1

5 internal lines (docs, tests, tooling) left out.