Todas las etiquetas
Etiqueta del catálogo

#ssrf

Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.

26 registros
Con la etiqueta «ssrf»Ordenado por índice de salud
npm
89Excelenteíndice de salud
node9-ai/node9-proxy
The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.
TypeScript★ 211↓ 7422/mes13 sept 2026
Apache-2.013 sept 2026 · métricas 2.10.0
npm
88Excelenteíndice de salud
asamassekou10/ship-safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
JavaScript★ 830↓ 5893/mes6 sept 2026
MIT6 sept 2026 · métricas 2.10.0
npm · RubyGems
88Excelenteíndice de salud
microsoft/AntiSSRF
El repositorio no publica descripción.
TypeScript · C#★ 112↓ 14.2K/mes12 sept 2026
MIT12 sept 2026 · métricas 2.10.0
npm
83Excelenteíndice de salud
lirantal/url-sheriff
validate and prevent against SSRF
TypeScript · Shell★ 13↓ 11.2K/mes15 sept 2026
Apache-2.015 sept 2026 · métricas 2.10.0
Go
81Excelenteíndice de salud
cplieger/ssrf
SSRF + DNS-rebinding protection for Go: validate outbound URLs and dial safely
Go★ 18 sept 2026
Apache-2.08 sept 2026 · métricas 2.10.0
PyPI
81Excelenteíndice de salud
n24q02m/web-core
Shared web infrastructure package for search, scraping, HTTP security, and stealth browsers. Used by wet-mcp and downstream applications.
Python★ 3↓ 4303/mes21 sept 2026
Apache-2.021 sept 2026 · métricas 2.10.0
npm
80Excelenteíndice de salud
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
TypeScript · JavaScript★ 1↓ 2225/mes12 sept 2026
MIT12 sept 2026 · métricas 2.10.0
npm
78Buenoíndice de salud
thegruber/linkpeek
Fast, safe TypeScript link preview library and URL metadata extractor for Open Graph, Twitter Cards, and JSON-LD on Node.js, Bun, Deno, and edge runtimes.
TypeScript · HTML · JavaScript★ 16↓ 10.9K/mes29 sept 2026
MIT29 sept 2026 · métricas 2.10.0
PyPI · npm
73Buenoíndice de salud
ninadphalak/LLM-Shield-Proxy
Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-boundary leaks), mcp-ssrf-check, and a self-hosted redacting gateway.
Python★ 13↓ 4234/mes20 oct 2026
Apache-2.020 oct 2026 · métricas 2.10.0
RubyGems
71Buenoíndice de salud
arkadiyt/ssrf_filter
A ruby gem for defending against Server Side Request Forgery (SSRF) attacks
Ruby★ 12511 sept 2026
MIT11 sept 2026 · métricas 2.10.0
npm
71Buenoíndice de salud
ni-c/mcp-internal-hosts
Is this host only reachable from where you stand? Classifies loopback, link-local and cloud-metadata hostnames — numerically, in every spelling
TypeScript★ 0↓ 3276/mes9 oct 2026
MIT9 oct 2026 · métricas 2.10.0
PyPI
69Buenoíndice de salud
manthanghasadiya/mcpsec
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
Python★ 24↓ 182/mes14 sept 2026
MIT14 sept 2026 · métricas 2.10.0
Go
67Buenoíndice de salud
sayseven7/frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
Go★ 1417 sept 2026
MIT17 sept 2026 · métricas 2.10.0
npm
65Buenoíndice de salud
Kikobeats/is-local-address
Statically check whether a hostname or IP is a local, loopback, private, or link-local address.
JavaScript★ 17↓ 41K/mes15 sept 2026
MIT15 sept 2026 · métricas 2.10.0
crates.io
65Buenoíndice de salud
walf443/reqwest-ssrf-guard
Mitigate SSRF and DNS rebinding in reqwest by filtering DNS lookups, redirect targets, and URL literals through an IP / host ACL
Rust★ 1↓ 22.9K/mes30 sept 2026
MIT30 sept 2026 · métricas 2.10.0
Packagist
63Moderadoíndice de salud
craftcms/url-validator
Validate URLs and IP addresses against SSRF, DNS rebinding, and cloud-metadata attacks.
PHP★ 1↓ 114.3K/mes9 oct 2026
MIT9 oct 2026 · métricas 2.10.0
Maven · PyPI
62Moderadoíndice de salud
devslab-kr/ssrf-guard
SSRF protection for the JVM — whitelist + private-IP filter + redirect re-validation + LLM-agent tool URL validation (Spring AI + LangChain4j). Modules for RestClient, RestTemplate, WebClient (reactor-netty DNS-time), Feign, Spring AI, LangChain4j, OkHttp, JDK HttpClient, Apache HttpClient 5. GraalVM native-image hints included.
Java★ 019 oct 2026
Apache-2.019 oct 2026 · métricas 2.10.0
Packagist
59Moderadoíndice de salud
j0k3r/httplug-ssrf-plugin
Server-Side Request Forgery (SSRF) protection plugin for HTTPlug
PHP★ 4↓ 5522/mes6 sept 2026
MIT6 sept 2026 · métricas 2.10.0
RubyGems
59Moderadoíndice de salud
kwent/faraday-ssrf-filter
Faraday middleware to prevent SSRF attacks
Ruby★ 219 oct 2026
MIT19 oct 2026 · métricas 2.10.0
crates.io
50Moderadoíndice de salud
hisn-io/http-acl
An ACL for HTTP requests.
Rust★ 512 oct 2026
Apache-2.012 oct 2026 · métricas 2.10.0
npm
50Moderadoíndice de salud
y-mehta/ssrf-req-filter
Module to prevent SSRF when sending requests in NodeJS. Blocks request to local and private IP addresses
JavaScript★ 22↓ 406.1K/mes21 oct 2026
MIT21 oct 2026 · métricas 2.10.0
Go
48Débilíndice de salud
ciphera-net/sigil
Self-hosted favicon resolver with an SSRF-hardened fetch boundary. Resolves a domain's real favicon server-side so lookups never leak to a third party.
Go★ 112 sept 2026
Apache-2.012 sept 2026 · métricas 2.10.0
PyPI
44Débilíndice de salud
oubliettesecurity/oubliette-sec-utils
Shared security helpers (path scope, argv injection, SSRF) for Oubliette Shield / Sentinel / Dungeon / Trap / sift-guard
Python★ 0↓ 444/mes19 sept 2026
Licencia propia19 sept 2026 · métricas 2.10.0
npm
41Débilíndice de salud
C0oki3s/ssrf
This is a Nodejs Module To prevent SSRF based attack's. Blocks request to Private IP and mitigate from further Bypass
HTML · JavaScript★ 1↓ 213/mes21 oct 2026
MIT21 oct 2026 · métricas 2.10.0
Packagist
41Débilíndice de salud
pushery/webhooks-for-laravel
An all-in-one, config-gated Laravel toolkit for signed inbound and outbound webhooks, customer-managed endpoints, and delivery observability
PHP · Blade★ 2↓ 2836/mes16 sept 2026
MIT16 sept 2026 · métricas 2.10.0
Hex
39Débilíndice de salud
slab/safeurl-elixir
HTTP client with built-in SSRF protection, compatible with Tesla and HTTPoison
Elixir★ 739 sept 2026
Licencia propia9 sept 2026 · métricas 2.10.0