Packages

validator

13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed

Upgrading validator From 1.1.0 to 13.15.22

153 releases in betweennotes for 80

Reading releases, release notes and advisories…

Other targets from 1.1.0Newest 1.x1.5.1Latest13.15.35
3.0.0, 2.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
  1. 1.1.0yours
  2. 10 releases
  3. 2.0.0major
  4. 1 release
  5. 3.0.0major
  6. 58 releases
  7. 4.0.0major
  8. 4 releases
  9. 4.0.5security
  10. 15 releases
  11. 5.0.0major
  12. 7 releases
  13. 6.0.0major
  14. 4 releases
  15. 7.0.0major
  16. 2 releases
  17. 8.0.0major
  18. 2 releases
  19. 9.0.0major
  20. 6 releases
  21. 9.4.1security
  22. 10.0.0major
  23. 12 releases
  24. 11.0.0major
  25. 1 release
  26. 12.0.0major
  27. 2 releases
  28. 13.0.0major
  29. 7 releases
  30. 13.7.0security
  31. 5 releases
  32. 13.15.20security
  33. 13.15.22target
1+
change to make
5
advisories fixed
385+
new
62+
fixes

Counted from 80 of 153 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking4.1.0

Security

Fixes 5 advisories affecting 1.1.0

  • isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    13.15.20

  • trim: remove regex to prevent ReDOS attack @tux-tn

    13.7.0

  • Patched a REDOS vulnerability in isDataURI

    9.4.1

  • Fixed a denial of service vulnerability in the isEmail() regex

    4.0.5

Release by release

  1. 13.15.22

    9 Nov 20252 new · 1 fix
    • new

      isURL: fix regression with hostnames with ports @mbtools

    • new

      isLength: improve handling Unicode variation selectors @koral--

    • fixed

      #2621

  2. 13.15.20

    Security fix26 Oct 20254 new · 2 fixes
    • security

      isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    • new

      isMobilePhone: add ar-QA locale @WardKhaddour

    • new

      isAlpha/isAlphanuneric: add Indic locales (ta-IN, te-IN, kn-IN, ml-IN, gu-IN, pa-IN, or-IN)

    • new

      isBase64: improve padding regex @KrayzeeKev

    • new

      isVAT: improve FR locale @iamAmer

    • fixed

      #2563

    • fixed

      #2581

  3. 13.15.15

    28 May 202516 new · 6 fixes
    • new

      isMobilePhone: improve el-CY locale @rezk2ll

    • new

      isMobilePhone: improve pt-AO locale @renaldodev

    • new

      isMobilePhone: improve ar-OM locale @tomcastro

    • new

      isIP: allow usage of option object @pixelbucket-dev

  4. 13.15.0

    24 Mar 202532 new · 12 fixes
    • new

      isISO31661Numeric @RobinvanderVliet

    • new

      isULID @arafatkn

    • new

      isISO15924 @xDivisionByZerox

    • new

      isMobilePhone: add es-GT locale @ignaciosuarezquilis

  5. 13.12.0

    9 May 202417 new · 7 fixes
    • new

      isAbaRouting @songyuew

    • new

      isLicensePlate add Pakistani en-PK locale @anasshakil

    • new

      isPort fix invalid leading zeros @anasshakil

    • new

      isTaxID added Argentina es-AR locale @estefrare

  6. 13.11.0

    4 Aug 202319 new
    • new

      isFreightContainerID: for shipping containers IDs @songyuew

    • new

      isMailtoURI @uksarkar

    • new

      isIBAN add MA locale @lroudge

    • new

      isCreditCard refactor @pano9000

  7. 13.9.0

    2 Feb 202371 new · 5 fixes
    • new

      isISO6391: add ISO 639-1 validator @braaar

    • new

      isLuhnNumber @ST-DDT

    • new

      isMACAddress: add EUI-validation @WikiRik @tux-tn

    • new

      isBase32: add option for Crockford's base32 alternative @BigOsvaap

  8. 13.7.0

    Security fix1 Nov 202158 new · 1 fix
    • security

      trim: remove regex to prevent ReDOS attack @tux-tn

    • new

      isISO4217, currency code validator @jpaya17

    • new

      isFQDN: add allow_wildcard option @fasenderos

    • new

      isRFC3339: Disallow prepended and appended strings to RFC 3339 date-time @jmacmahon

70 other lines we could not sort, mostly version bumps

  • New features: isVAT #1463

    13.5.1

  • New features: isTaxID #1446

    13.5.1

  • New features: isBase58 #1445

    13.5.1

  • New features: isStrongPassword #1348

    13.5.1

  • Fixes and Enhancements: isISO8601: add strictSeparator @brostone51

    13.5.1

  • Fixes and Enhancements: isFQDN: make more strict @CristhianMotoche

    13.5.1

  • Fixes and Enhancements: isFQDN: allow_underscore option @gibson042

    13.5.1

  • Fixes and Enhancements: isEmail: character blacklisting @rubiin

    13.5.1

  • Fixes and Enhancements: isURL: added require_port option @yshanli

    13.5.1

  • Fixes and Enhancements: isEmail: respect ignore_max_length option @evantahler

    13.5.1

5 internal lines (docs, tests, tooling) left out.