{"uid":"cap_-d_aFJao6hUhnZzHMRBx2","slug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-f36cf2a3","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/cve-lookup)","url":"https://serp-extract.agentdiet.dev/v1/cve-lookup?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"limit":{"type":"integer","default":20,"maximum":100,"minimum":1,"description":"Maximum number of items to return per page (1-100)"},"cursor":{"type":"string","description":"Opaque pagination cursor for fetching the next page"},"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_qyYW1-S4uvHJu2hb_glkF","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for any PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me which version I should upgrade to?","exampleUseCases":[{"title":"CI pipeline dependency vulnerability check","prompt":"Before we merge this PR, can you scan the npm package 'lodash' for any known CVEs or security advisories and tell me if there's a safe patched version we should be using?"},{"title":"Rust crate security audit","prompt":"I'm about to use the 'hyper' crate in my Rust project — can you check OSV.dev for any active vulnerabilities or GHSA advisories against it?"},{"title":"Go module security review","prompt":"Can you look up whether golang.org/x/net has any known CVEs or open vulnerability advisories, and if so, what version resolves them?"}],"resultDescription":"Returns a structured response containing active CVE identifiers, GHSA advisory IDs, affected version ranges, severity details, and recommended patched versions for the queried package, sourced live from Google's OSV.dev vulnerability database.","failureModes":["Package not found in OSV.dev — returns empty or null advisory list","Invalid ecosystem prefix causes lookup failure (e.g. typo in 'PyPI:' prefix)","OSV.dev upstream unavailable — may return timeout or 5xx error","Package name provided without ecosystem prefix may cause ambiguous or incorrect results","No known vulnerabilities found returns an empty list, which may be misinterpreted as an error"],"whenToPreferThis":"Choose this endpoint when you need live, authoritative vulnerability intelligence directly from Google's OSV.dev for open-source packages across PyPI, npm, Go modules, or Rust crates. Prefer it over static NVD snapshots or bundled advisory databases when you need up-to-date CVE and GHSA data at call time, especially for automated CI/CD security gates or agent-driven dependency audits.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:55.935Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-5ca26ef1"}