Packages

validator

13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed

Upgrading validator From 4.0.4 to 13.15.22

77 releases in betweennotes for 75

Reading releases, release notes and advisories…

Other targets from 4.0.4Newest 4.x4.9.0Latest13.15.35
  1. 4.0.4yours
  2. 4.0.5security
  3. 15 releases
  4. 5.0.0major
  5. 7 releases
  6. 6.0.0major
  7. 4 releases
  8. 7.0.0major
  9. 2 releases
  10. 8.0.0major
  11. 2 releases
  12. 9.0.0major
  13. 6 releases
  14. 9.4.1security
  15. 10.0.0major
  16. 12 releases
  17. 11.0.0major
  18. 1 release
  19. 12.0.0major
  20. 2 releases
  21. 13.0.0major
  22. 7 releases
  23. 13.7.0security
  24. 5 releases
  25. 13.15.20security
  26. 13.15.22target
1+
change to make
3
advisories fixed
383+
new
60+
fixes

Counted from 75 of 77 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking4.1.0

Security

Fixes 3 advisories affecting 4.0.4

  • isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    13.15.20

  • trim: remove regex to prevent ReDOS attack @tux-tn

    13.7.0

  • Patched a REDOS vulnerability in isDataURI

    9.4.1

  • Fixed a denial of service vulnerability in the isEmail() regex

    4.0.5

Release by release

  1. 13.15.22

    9 Nov 20252 new · 1 fix
    • new

      isURL: fix regression with hostnames with ports @mbtools

    • new

      isLength: improve handling Unicode variation selectors @koral--

    • fixed

      #2621

  2. 13.15.20

    Security fix26 Oct 20254 new · 2 fixes
    • security

      isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    • new

      isMobilePhone: add ar-QA locale @WardKhaddour

    • new

      isAlpha/isAlphanuneric: add Indic locales (ta-IN, te-IN, kn-IN, ml-IN, gu-IN, pa-IN, or-IN)

    • new

      isBase64: improve padding regex @KrayzeeKev

    • new

      isVAT: improve FR locale @iamAmer

    • fixed

      #2563

    • fixed

      #2581

  3. 13.15.15

    28 May 202516 new · 6 fixes
    • new

      isMobilePhone: improve el-CY locale @rezk2ll

    • new

      isMobilePhone: improve pt-AO locale @renaldodev

    • new

      isMobilePhone: improve ar-OM locale @tomcastro

    • new

      isIP: allow usage of option object @pixelbucket-dev

  4. 13.15.0

    24 Mar 202532 new · 12 fixes
    • new

      isISO31661Numeric @RobinvanderVliet

    • new

      isULID @arafatkn

    • new

      isISO15924 @xDivisionByZerox

    • new

      isMobilePhone: add es-GT locale @ignaciosuarezquilis

  5. 13.12.0

    9 May 202417 new · 7 fixes
    • new

      isAbaRouting @songyuew

    • new

      isLicensePlate add Pakistani en-PK locale @anasshakil

    • new

      isPort fix invalid leading zeros @anasshakil

    • new

      isTaxID added Argentina es-AR locale @estefrare

  6. 13.11.0

    4 Aug 202319 new
    • new

      isFreightContainerID: for shipping containers IDs @songyuew

    • new

      isMailtoURI @uksarkar

    • new

      isIBAN add MA locale @lroudge

    • new

      isCreditCard refactor @pano9000

  7. 13.9.0

    2 Feb 202371 new · 5 fixes
    • new

      isISO6391: add ISO 639-1 validator @braaar

    • new

      isLuhnNumber @ST-DDT

    • new

      isMACAddress: add EUI-validation @WikiRik @tux-tn

    • new

      isBase32: add option for Crockford's base32 alternative @BigOsvaap

  8. 13.7.0

    Security fix1 Nov 202158 new · 1 fix
    • security

      trim: remove regex to prevent ReDOS attack @tux-tn

    • new

      isISO4217, currency code validator @jpaya17

    • new

      isFQDN: add allow_wildcard option @fasenderos

    • new

      isRFC3339: Disallow prepended and appended strings to RFC 3339 date-time @jmacmahon

67 other lines we could not sort, mostly version bumps

  • New features: isVAT #1463

    13.5.1

  • New features: isTaxID #1446

    13.5.1

  • New features: isBase58 #1445

    13.5.1

  • New features: isStrongPassword #1348

    13.5.1

  • Fixes and Enhancements: isISO8601: add strictSeparator @brostone51

    13.5.1

  • Fixes and Enhancements: isFQDN: make more strict @CristhianMotoche

    13.5.1

  • Fixes and Enhancements: isFQDN: allow_underscore option @gibson042

    13.5.1

  • Fixes and Enhancements: isEmail: character blacklisting @rubiin

    13.5.1

  • Fixes and Enhancements: isURL: added require_port option @yshanli

    13.5.1

  • Fixes and Enhancements: isEmail: respect ignore_max_length option @evantahler

    13.5.1

5 internal lines (docs, tests, tooling) left out.