github.com/maximhq/bifrost/core
Fastest enterprise AI gateway (50x faster than LiteLLM) with adaptive load balancer, cluster mode, guardrails, 1000+ models support & <100 µs overhead at 5k RPS.
View on Github
Activity
- Latest release
- 5d ago
- Total releases
- 80
- Cadence
- ~3 days
- Last 12 months
- 62
Reach
- Stars
- 8.0k
Details
- First release
- Apr 15, 2025
| Version | Released | |
|---|---|---|
v1.8.6
patch
|
v1.8.6
patch
Dependencies (27)
+ 19 more |
|
v1.8.5
patch
|
v1.8.5
patch
Dependencies (27)
+ 19 more |
|
v1.7.15
patch
|
v1.7.15
patch
Dependencies (27)
+ 19 more |
|
v1.7.14
patch
|
v1.7.14
patch
Dependencies (27)
+ 19 more |
|
v1.8.4
patch
|
v1.8.4
patch
Dependencies (26)
+ 18 more |
|
v1.8.3
patch
|
v1.8.3
patch
Dependencies (26)
+ 18 more |
|
v1.8.2
patch
|
v1.8.2
patch
Dependencies (26)
+ 18 more |
|
v1.8.1
patch
|
v1.8.1
patch
Dependencies (26)
+ 18 more |
|
v1.8.0
minor
|
v1.8.0
minor
Dependencies (26)
+ 18 more |
|
v1.7.13
patch
|
v1.7.13
patch
Dependencies (27)
+ 19 more |
|
v1.7.12
patch
|
v1.7.12
patch
Dependencies (27)
+ 19 more |
|
v1.7.11
patch
|
v1.7.11
patch
Dependencies (27)
+ 19 more |
|
v1.7.10
patch
|
v1.7.10
patch
Dependencies (27)
+ 19 more |
|
v1.7.9
patch
|
v1.7.9
patch
Dependencies (27)
+ 19 more |
|
v1.7.8
patch
|
v1.7.8
patch
Dependencies (27)
+ 19 more |
|
v1.7.7
patch
|
v1.7.7
patch
Dependencies (27)
+ 19 more |
|
v1.7.6
patch
|
v1.7.6
patch
Dependencies (27)
+ 19 more |
|
v1.7.5
patch
|
v1.7.5
patch
Dependencies (27)
+ 19 more |
|
v1.7.4
minor
|
v1.7.4
minor
Dependencies (27)
+ 19 more |
|
v1.7.3
patch
|
v1.7.3
patch
Dependencies (27)
+ 19 more |
|
v1.7.2
patch
|
v1.7.2
patch
Dependencies (27)
+ 19 more |
|
v1.7.1
patch
|
v1.7.1
patch
Dependencies (27)
+ 19 more |
|
v1.6.4
patch
|
v1.6.4
patch
Dependencies (27)
+ 19 more |
|
v1.7.0
minor
|
v1.7.0
minor
Dependencies (27)
+ 19 more |
|
v1.6.3
patch
|
v1.6.3
patch
Dependencies (27)
+ 19 more |
|
v1.6.2
patch
|
v1.6.2
patch
Dependencies (27)
+ 19 more |
|
v1.6.1
minor
|
v1.6.1
minor
Dependencies (27)
+ 19 more |
|
v1.6.0
minor
|
v1.6.0
minor
Dependencies (27)
+ 19 more |
|
v1.5.22
patch
|
v1.5.22
patch
Dependencies (27)
+ 19 more |
|
v1.5.21
patch
|
v1.5.21
patch
Dependencies (27)
+ 19 more |
|
v1.5.20
patch
|
v1.5.20
patch
Dependencies (27)
+ 19 more |
|
v1.5.19
patch
|
v1.5.19
patch
Dependencies (27)
+ 19 more |
|
v1.5.18
patch
|
v1.5.18
patch
Dependencies (27)
+ 19 more |
|
v1.5.17
patch
|
v1.5.17
patch
Dependencies (27)
+ 19 more |
|
v1.5.16
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.5.16
patch
Dependencies (27)
+ 19 more |
|
v1.5.14
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.5.14
patch
Dependencies (27)
+ 19 more |
|
v1.5.3
minor
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.5.3
minor
Dependencies (26)
+ 18 more |
|
v1.4.19
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.4.19
patch
Dependencies (26)
+ 18 more |
|
v1.4.18
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.4.18
patch
Dependencies (26)
+ 18 more |
|
v1.4.17
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.4.17
patch
Dependencies (26)
+ 18 more |
|
v1.4.15
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.4.15
patch
Dependencies (26)
+ 18 more |
|
v1.4.12
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.4.12
patch
Dependencies (26)
+ 18 more |
|
v1.4.8
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.4.8
patch
Dependencies (24)
+ 16 more |
|
v1.4.7
minor
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.4.7
minor
Dependencies (21)
+ 13 more |
|
v1.3.14
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.3.14
patch
Dependencies (20)
+ 12 more |
|
v1.3.12
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.3.12
patch
Dependencies (20)
+ 12 more |
|
v1.3.9
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.3.9
patch
Dependencies (19)
+ 11 more |
|
v1.3.8
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.3.8
patch
Dependencies (19)
+ 11 more |
|
v1.3.7
patch
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.3.7
patch
Dependencies (19)
+ 11 more |
|
v1.3.5
minor
1 CVE
CVE-2026-55245
GO-2026-6320
GHSA-w98g-5w9p-p3rc
Sep 02, 2026
Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL in github.com/maximhq/bifrost/core Fixed in
1.5.17
References Updated Sep 02, 2026 · Source: OSV.dev |
v1.3.5
minor
Dependencies (19)
+ 11 more |