Packages

validator

13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed

Upgrading validator From 3.41.1 to 13.15.35

89 releases in betweennotes for 83

Reading releases, release notes and advisories…

Other targets from 3.41.1Newest 3.x3.43.0Clears its 3 advisories13.15.22
  1. 3.41.1yours
  2. 4 releases
  3. 4.0.0major
  4. 4 releases
  5. 4.0.5security
  6. 15 releases
  7. 5.0.0major
  8. 7 releases
  9. 6.0.0major
  10. 4 releases
  11. 7.0.0major
  12. 2 releases
  13. 8.0.0major
  14. 2 releases
  15. 9.0.0major
  16. 6 releases
  17. 9.4.1security
  18. 10.0.0major
  19. 12 releases
  20. 11.0.0major
  21. 1 release
  22. 12.0.0major
  23. 2 releases
  24. 13.0.0major
  25. 7 releases
  26. 13.7.0security
  27. 5 releases
  28. 13.15.20security
  29. 3 releases
  30. 13.15.35target
1+
change to make
3
advisories fixed
397+
new
67+
fixes

Counted from 83 of 89 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking4.1.0

Security

Fixes 3 advisories affecting 3.41.1

  • isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    13.15.20

  • trim: remove regex to prevent ReDOS attack @tux-tn

    13.7.0

  • Patched a REDOS vulnerability in isDataURI

    9.4.1

  • Fixed a denial of service vulnerability in the isEmail() regex

    4.0.5

Release by release

  1. 13.15.35

    2 Apr 20269 new · 3 fixes
    • new

      isISO31661Alpha2/isISO31661Alpha3: add support for Kosovo (XK / XXK)

    • new

      isHexColor: ignore non-object options @yuna0831

    • new

      isTaxID: improve pt-BR locale by adding support for alphanumeric CNPJ format @easedu

    • new

      isTaxID: improve pt-BR locale by adding support for formatted CPF values @easedu

  2. 13.15.26

    18 Dec 20253 new · 1 fix
    • new

      isHexColor: add require_hashtag option @Numbers0689

    • new

      isURL: handle possible bypass with URL-encoded content @WikiRik

    • new

      isIBAN: improve IR locale @ds1371dani

    • fixed

      #2640

  3. 13.15.23

    10 Nov 20251 fix

  4. 13.15.22

    9 Nov 20252 new · 1 fix
    • new

      isURL: fix regression with hostnames with ports @mbtools

    • new

      isLength: improve handling Unicode variation selectors @koral--

    • fixed

      #2621

  5. 13.15.20

    Security fix26 Oct 20254 new · 2 fixes
    • security

      isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    • new

      isMobilePhone: add ar-QA locale @WardKhaddour

    • new

      isAlpha/isAlphanuneric: add Indic locales (ta-IN, te-IN, kn-IN, ml-IN, gu-IN, pa-IN, or-IN)

    • new

      isBase64: improve padding regex @KrayzeeKev

    • new

      isVAT: improve FR locale @iamAmer

    • fixed

      #2563

    • fixed

      #2581

  6. 13.15.15

    28 May 202516 new · 6 fixes
    • new

      isMobilePhone: improve el-CY locale @rezk2ll

    • new

      isMobilePhone: improve pt-AO locale @renaldodev

    • new

      isMobilePhone: improve ar-OM locale @tomcastro

    • new

      isIP: allow usage of option object @pixelbucket-dev

  7. 13.15.0

    24 Mar 202532 new · 12 fixes
    • new

      isISO31661Numeric @RobinvanderVliet

    • new

      isULID @arafatkn

    • new

      isISO15924 @xDivisionByZerox

    • new

      isMobilePhone: add es-GT locale @ignaciosuarezquilis

  8. 13.12.0

    9 May 202417 new · 7 fixes
    • new

      isAbaRouting @songyuew

    • new

      isLicensePlate add Pakistani en-PK locale @anasshakil

    • new

      isPort fix invalid leading zeros @anasshakil

    • new

      isTaxID added Argentina es-AR locale @estefrare

70 other lines we could not sort, mostly version bumps

  • New features: isVAT #1463

    13.5.1

  • New features: isTaxID #1446

    13.5.1

  • New features: isBase58 #1445

    13.5.1

  • New features: isStrongPassword #1348

    13.5.1

  • Fixes and Enhancements: isISO8601: add strictSeparator @brostone51

    13.5.1

  • Fixes and Enhancements: isFQDN: make more strict @CristhianMotoche

    13.5.1

  • Fixes and Enhancements: isFQDN: allow_underscore option @gibson042

    13.5.1

  • Fixes and Enhancements: isEmail: character blacklisting @rubiin

    13.5.1

  • Fixes and Enhancements: isURL: added require_port option @yshanli

    13.5.1

  • Fixes and Enhancements: isEmail: respect ignore_max_length option @evantahler

    13.5.1

5 internal lines (docs, tests, tooling) left out.