github.com/maximhq/bifrost/core
Open-source, high-performance AI gateway that works as your LLM gateway, MCP gateway and agent gateway. One OpenAI-compatible API for 10,000+ models, with failover, load balancing, semantic caching, virtual keys, budgets and MCP Code Mode. Works with any SDK or agent and adds under 200µs of overhead at 5k RPS.
Activity
- Latest release
- 1w ago
- Total releases
- 94
- Cadence
- ~2 days
- Last 12 months
- 73
Reach
- Stars
- 9.1k
Details
- First release
- Apr 15, 2025
| Version | Released | |
|---|---|---|
v1.13.1
patch
|
v1.13.1
patch
Dependencies (33)
+ 25 more |
|
v1.13.0
minor
|
v1.13.0
minor
Dependencies (33)
+ 25 more |
|
v1.12.0
minor
|
v1.12.0
minor
Dependencies (33)
+ 25 more |
|
v1.11.3
patch
|
v1.11.3
patch
Dependencies (27)
+ 19 more |
|
v1.11.2
patch
|
v1.11.2
patch
Dependencies (27)
+ 19 more |
|
v1.11.1
patch
|
v1.11.1
patch
Dependencies (27)
+ 19 more |
|
v1.11.0
minor
|
v1.11.0
minor
Dependencies (27)
+ 19 more |
|
v1.10.4
patch
|
v1.10.4
patch
Dependencies (27)
+ 19 more |
|
v1.10.3
patch
|
v1.10.3
patch
Dependencies (27)
+ 19 more |
|
v1.10.2
patch
|
v1.10.2
patch
Dependencies (27)
+ 19 more |
|
v1.10.1
patch
|
v1.10.1
patch
Dependencies (27)
+ 19 more |
|
v1.10.0
minor
|
v1.10.0
minor
Dependencies (27)
+ 19 more |
|
v1.9.1
patch
|
v1.9.1
patch
Dependencies (27)
+ 19 more |
|
v1.9.0
minor
|
v1.9.0
minor
Dependencies (27)
+ 19 more |
|
v1.8.6
patch
|
v1.8.6
patch
Dependencies (27)
+ 19 more |
|
v1.8.5
patch
|
v1.8.5
patch
Dependencies (27)
+ 19 more |
|
v1.7.15
patch
|
v1.7.15
patch
Dependencies (27)
+ 19 more |
|
v1.7.14
patch
|
v1.7.14
patch
Dependencies (27)
+ 19 more |
|
v1.8.4
patch
|
v1.8.4
patch
Dependencies (26)
+ 18 more |
|
v1.8.3
patch
|
v1.8.3
patch
Dependencies (26)
+ 18 more |
|
v1.8.2
patch
|
v1.8.2
patch
Dependencies (26)
+ 18 more |
|
v1.8.1
patch
|
v1.8.1
patch
Dependencies (26)
+ 18 more |
|
v1.8.0
minor
|
v1.8.0
minor
Dependencies (26)
+ 18 more |
|
v1.7.13
patch
|
v1.7.13
patch
Dependencies (27)
+ 19 more |
|
v1.7.12
patch
|
v1.7.12
patch
Dependencies (27)
+ 19 more |
|
v1.7.11
patch
|
v1.7.11
patch
Dependencies (27)
+ 19 more |
|
v1.7.10
patch
|
v1.7.10
patch
Dependencies (27)
+ 19 more |
|
v1.7.9
patch
|
v1.7.9
patch
Dependencies (27)
+ 19 more |
|
v1.7.8
patch
|
v1.7.8
patch
Dependencies (27)
+ 19 more |
|
v1.7.7
patch
|
v1.7.7
patch
Dependencies (27)
+ 19 more |
|
v1.7.6
patch
|
v1.7.6
patch
Dependencies (27)
+ 19 more |
|
v1.7.5
patch
|
v1.7.5
patch
Dependencies (27)
+ 19 more |
|
v1.7.4
minor
|
v1.7.4
minor
Dependencies (27)
+ 19 more |
|
v1.7.3
patch
|
v1.7.3
patch
Dependencies (27)
+ 19 more |
|
v1.7.2
patch
|
v1.7.2
patch
Dependencies (27)
+ 19 more |
|
v1.7.1
patch
|
v1.7.1
patch
Dependencies (27)
+ 19 more |
|
v1.6.4
patch
|
v1.6.4
patch
Dependencies (27)
+ 19 more |
|
v1.7.0
minor
|
v1.7.0
minor
Dependencies (27)
+ 19 more |
|
v1.6.3
patch
|
v1.6.3
patch
Dependencies (27)
+ 19 more |
|
v1.6.2
patch
|
v1.6.2
patch
Dependencies (27)
+ 19 more |
|
v1.6.1
minor
|
v1.6.1
minor
Dependencies (27)
+ 19 more |
|
v1.6.0
minor
|
v1.6.0
minor
Dependencies (27)
+ 19 more |
|
v1.5.22
patch
|
v1.5.22
patch
Dependencies (27)
+ 19 more |
|
v1.5.21
patch
|
v1.5.21
patch
Dependencies (27)
+ 19 more |
|
v1.5.20
patch
|
v1.5.20
patch
Dependencies (27)
+ 19 more |
|
v1.5.19
patch
|
v1.5.19
patch
Dependencies (27)
+ 19 more |
|
v1.5.18
patch
|
v1.5.18
patch
Dependencies (27)
+ 19 more |
|
v1.5.17
patch
|
v1.5.17
patch
Dependencies (27)
+ 19 more |
|
v1.5.16
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.5.16
patch
Dependencies (27)
+ 19 more |
|
v1.5.14
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.5.14
patch
Dependencies (27)
+ 19 more |