Packages

validator

13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed

Upgrading validator From 4.6.1 to 13.15.35

68 releases in betweennotes for 66

Reading releases, release notes and advisories…

Other targets from 4.6.1Newest 4.x4.9.0Clears its 3 advisories13.15.22
The note of 13.0.0, 12.0.0, 11.0.0, 10.0.0, 9.0.0, 8.0.0, 7.0.0, 6.0.0, 5.0.0 lists no breaking change or deprecation, which is rare for a major.
  1. 4.6.1yours
  2. 4 releases
  3. 5.0.0major
  4. 7 releases
  5. 6.0.0major
  6. 4 releases
  7. 7.0.0major
  8. 2 releases
  9. 8.0.0major
  10. 2 releases
  11. 9.0.0major
  12. 6 releases
  13. 9.4.1security
  14. 10.0.0major
  15. 12 releases
  16. 11.0.0major
  17. 1 release
  18. 12.0.0major
  19. 2 releases
  20. 13.0.0major
  21. 7 releases
  22. 13.7.0security
  23. 5 releases
  24. 13.15.20security
  25. 3 releases
  26. 13.15.35target
?
changes to make
3
advisories fixed
385+
new
57+
fixes

Counted from 66 of 68 release notes. Advisories are counted from the advisory database, in full.

Security

Fixes 3 advisories affecting 4.6.1

  • isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    13.15.20

  • trim: remove regex to prevent ReDOS attack @tux-tn

    13.7.0

  • Patched a REDOS vulnerability in isDataURI

    9.4.1

Release by release

  1. 13.15.35

    2 Apr 20269 new · 3 fixes
    • new

      isISO31661Alpha2/isISO31661Alpha3: add support for Kosovo (XK / XXK)

    • new

      isHexColor: ignore non-object options @yuna0831

    • new

      isTaxID: improve pt-BR locale by adding support for alphanumeric CNPJ format @easedu

    • new

      isTaxID: improve pt-BR locale by adding support for formatted CPF values @easedu

  2. 13.15.26

    18 Dec 20253 new · 1 fix
    • new

      isHexColor: add require_hashtag option @Numbers0689

    • new

      isURL: handle possible bypass with URL-encoded content @WikiRik

    • new

      isIBAN: improve IR locale @ds1371dani

    • fixed

      #2640

  3. 13.15.23

    10 Nov 20251 fix

  4. 13.15.22

    9 Nov 20252 new · 1 fix
    • new

      isURL: fix regression with hostnames with ports @mbtools

    • new

      isLength: improve handling Unicode variation selectors @koral--

    • fixed

      #2621

  5. 13.15.20

    Security fix26 Oct 20254 new · 2 fixes
    • security

      isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    • new

      isMobilePhone: add ar-QA locale @WardKhaddour

    • new

      isAlpha/isAlphanuneric: add Indic locales (ta-IN, te-IN, kn-IN, ml-IN, gu-IN, pa-IN, or-IN)

    • new

      isBase64: improve padding regex @KrayzeeKev

    • new

      isVAT: improve FR locale @iamAmer

    • fixed

      #2563

    • fixed

      #2581

  6. 13.15.15

    28 May 202516 new · 6 fixes
    • new

      isMobilePhone: improve el-CY locale @rezk2ll

    • new

      isMobilePhone: improve pt-AO locale @renaldodev

    • new

      isMobilePhone: improve ar-OM locale @tomcastro

    • new

      isIP: allow usage of option object @pixelbucket-dev

  7. 13.15.0

    24 Mar 202532 new · 12 fixes
    • new

      isISO31661Numeric @RobinvanderVliet

    • new

      isULID @arafatkn

    • new

      isISO15924 @xDivisionByZerox

    • new

      isMobilePhone: add es-GT locale @ignaciosuarezquilis

  8. 13.12.0

    9 May 202417 new · 7 fixes
    • new

      isAbaRouting @songyuew

    • new

      isLicensePlate add Pakistani en-PK locale @anasshakil

    • new

      isPort fix invalid leading zeros @anasshakil

    • new

      isTaxID added Argentina es-AR locale @estefrare

64 other lines we could not sort, mostly version bumps

  • New features: isVAT #1463

    13.5.1

  • New features: isTaxID #1446

    13.5.1

  • New features: isBase58 #1445

    13.5.1

  • New features: isStrongPassword #1348

    13.5.1

  • Fixes and Enhancements: isISO8601: add strictSeparator @brostone51

    13.5.1

  • Fixes and Enhancements: isFQDN: make more strict @CristhianMotoche

    13.5.1

  • Fixes and Enhancements: isFQDN: allow_underscore option @gibson042

    13.5.1

  • Fixes and Enhancements: isEmail: character blacklisting @rubiin

    13.5.1

  • Fixes and Enhancements: isURL: added require_port option @yshanli

    13.5.1

  • Fixes and Enhancements: isEmail: respect ignore_max_length option @evantahler

    13.5.1

5 internal lines (docs, tests, tooling) left out.