dssrf

v1.0.3npm· JavaScript

SSRF defense library for Node.js with safe URL validation utilities.

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceHealthy

PopularityUnknown

Security1 advisory

LicensePermissive

DepsLean

Maintenance

Last published 1 month ago.

Popularity

Download count unavailable.

Security

1 known advisory (worst: high severity).

License

MIT

Dependencies

3 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
dssrf: every IPv6 category bypasses is_url_safe
GHSA-8p33-q827-ghj5 Fixed in 1.3.0Published 2026-05-06

Recent releases