validator
13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed
Upgrading validator From 13.15.0 to 13.15.35
6 releases in betweenevery note read
Reading releases, release notes and advisories…
- 0
- changes to make
- 2
- advisories fixed
- 34
- new
- 14
- fixes
Security
Fixes 2 advisories affecting 13.15.0
- validator.js has a URL validation bypass vulnerability in its isURL functionmoderate · GHSA-9965-vmph-33xx
- Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elementshigh · GHSA-vghf-hv5q-vc2g
- 13.15.20
isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry
Release by release
- new
isISO31661Alpha2/isISO31661Alpha3: add support for Kosovo (XK/XXK) - new
isHexColor: ignore non-object options @yuna0831 - new
isTaxID: improve
pt-BRlocale by adding support for alphanumeric CNPJ format @easedu - new
isTaxID: improve
pt-BRlocale by adding support for formatted CPF values @easedu
- new
- security
isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry - new
isMobilePhone: addar-QAlocale @WardKhaddour - new
isAlpha/isAlphanuneric: add Indic locales (ta-IN,te-IN,kn-IN,ml-IN,gu-IN,pa-IN,or-IN) - new
isBase64: improve padding regex @KrayzeeKev - new
isVAT: improveFRlocale @iamAmer - fixed
- fixed
- security
- new
isMobilePhone: improve
el-CYlocale @rezk2ll - new
isMobilePhone: improve
pt-AOlocale @renaldodev - new
isMobilePhone: improve
ar-OMlocale @tomcastro - new
isIP: allow usage of option object @pixelbucket-dev
- new