Is validator 13.15 vulnerable?
npm · 7 releases from 13.15.0 to 13.15.35 · latest validator is 13.15.35 · checked 2 Nov 2026
No known advisories in the last release
validator 13.15.35, the last 13.15 release, has no known advisories. 2 advisories affect earlier 13.15.x releases, so update to 13.15.35.
npm install validator@13.15.35Fixed within 13.15.x, affecting earlier releases
Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements
- Affected
- <13.15.22
- Fixed in
- 13.15.22
validator.js has a URL validation bypass vulnerability in its isURL function
- Affected
- <13.15.20
- Fixed in
- 13.15.20
Which of your client projects are still on validator 13.15?
NPMscan reads the lockfiles in every GitHub repo you pick, finds the exact validator version each one installs, and checks it against these advisories. Each finding comes with the command that fixes it.
Other validator versions
Advisory data from OSV.dev (opens OSV.dev in a new tab), which includes the GitHub Advisory Database. Release list from the npm registry. Refreshed daily.