npm
node9-ai/node9-proxy
The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
All tags
Catalogue tag
#ssrf
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
26 records
npm
asamassekou10/ship-safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
MITSep 6, 2026 · metrics 2.10.0
npm · RubyGems
microsoft/AntiSSRF
No repository description published.
MITSep 12, 2026 · metrics 2.10.0
npm
lirantal/url-sheriff
validate and prevent against SSRF
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
cplieger/ssrf
SSRF + DNS-rebinding protection for Go: validate outbound URLs and dial safely
Apache-2.0Sep 8, 2026 · metrics 2.10.0
PyPI
n24q02m/web-core
Shared web infrastructure package for search, scraping, HTTP security, and stealth browsers. Used by wet-mcp and downstream applications.
Apache-2.0Sep 21, 2026 · metrics 2.10.0
npm
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
MITSep 12, 2026 · metrics 2.10.0
npm
thegruber/linkpeek
Fast, safe TypeScript link preview library and URL metadata extractor for Open Graph, Twitter Cards, and JSON-LD on Node.js, Bun, Deno, and edge runtimes.
MITSep 29, 2026 · metrics 2.10.0
PyPI · npm
ninadphalak/LLM-Shield-Proxy
Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-boundary leaks), mcp-ssrf-check, and a self-hosted redacting gateway.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
RubyGems
arkadiyt/ssrf_filter
A ruby gem for defending against Server Side Request Forgery (SSRF) attacks
MITSep 11, 2026 · metrics 2.10.0
npm
ni-c/mcp-internal-hosts
Is this host only reachable from where you stand? Classifies loopback, link-local and cloud-metadata hostnames — numerically, in every spelling
MITOct 9, 2026 · metrics 2.10.0
PyPI
manthanghasadiya/mcpsec
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
MITSep 14, 2026 · metrics 2.10.0
Go
sayseven7/frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
MITSep 17, 2026 · metrics 2.10.0
npm
Kikobeats/is-local-address
Statically check whether a hostname or IP is a local, loopback, private, or link-local address.
MITSep 15, 2026 · metrics 2.10.0
crates.io
walf443/reqwest-ssrf-guard
Mitigate SSRF and DNS rebinding in reqwest by filtering DNS lookups, redirect targets, and URL literals through an IP / host ACL
MITSep 30, 2026 · metrics 2.10.0
Packagist
craftcms/url-validator
Validate URLs and IP addresses against SSRF, DNS rebinding, and cloud-metadata attacks.
MITOct 9, 2026 · metrics 2.10.0
Maven · PyPI
devslab-kr/ssrf-guard
SSRF protection for the JVM — whitelist + private-IP filter + redirect re-validation + LLM-agent tool URL validation (Spring AI + LangChain4j). Modules for RestClient, RestTemplate, WebClient (reactor-netty DNS-time), Feign, Spring AI, LangChain4j, OkHttp, JDK HttpClient, Apache HttpClient 5. GraalVM native-image hints included.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
j0k3r/httplug-ssrf-plugin
Server-Side Request Forgery (SSRF) protection plugin for HTTPlug
MITSep 6, 2026 · metrics 2.10.0
RubyGems
kwent/faraday-ssrf-filter
Faraday middleware to prevent SSRF attacks
MITOct 19, 2026 · metrics 2.10.0
crates.io
hisn-io/http-acl
An ACL for HTTP requests.
Apache-2.0Oct 12, 2026 · metrics 2.10.0
npm
y-mehta/ssrf-req-filter
Module to prevent SSRF when sending requests in NodeJS. Blocks request to local and private IP addresses
MITOct 21, 2026 · metrics 2.10.0
Go
ciphera-net/sigil
Self-hosted favicon resolver with an SSRF-hardened fetch boundary. Resolves a domain's real favicon server-side so lookups never leak to a third party.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
oubliettesecurity/oubliette-sec-utils
Shared security helpers (path scope, argv injection, SSRF) for Oubliette Shield / Sentinel / Dungeon / Trap / sift-guard
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
C0oki3s/ssrf
This is a Nodejs Module To prevent SSRF based attack's. Blocks request to Private IP and mitigate from further Bypass
MITOct 21, 2026 · metrics 2.10.0
Packagist
pushery/webhooks-for-laravel
An all-in-one, config-gated Laravel toolkit for signed inbound and outbound webhooks, customer-managed endpoints, and delivery observability
MITSep 16, 2026 · metrics 2.10.0
Hex
slab/safeurl-elixir
HTTP client with built-in SSRF protection, compatible with Tesla and HTTPoison
Custom licenseSep 9, 2026 · metrics 2.10.0