{"uid":"cap_0-Qs-QMds1FO-cvtHZMI2","slug":"x402-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-100f4fda","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://x402-audit.agentdiet.dev/v1/zero-day-advisories)","url":"https://x402-audit.agentdiet.dev/v1/zero-day-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_gqnsMpn8RNBEHYOCb6Vb6","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"x402-audit.agentdiet.dev","brandSlug":"x402-audit-agentdiet-dev-mpp","brandBaseUrl":"https://x402-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev live vulnerability data for a given open-source package and returns active CVEs, GHSA advisories, and patched versions.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me what patched version I should upgrade to?","exampleUseCases":[{"title":"Pre-deployment dependency security check","prompt":"Before we ship this release, can you scan 'npm:lodash' for any known CVEs or GitHub security advisories and let me know if there's a safe version we should be using instead?"},{"title":"Rust crate vulnerability audit","prompt":"I'm using 'crates.io:hyper' in my Rust project — can you pull up any active CVEs or GHSA advisories for it from OSV.dev so I know if it's safe to keep as a dependency?"},{"title":"Go module zero-day check","prompt":"Can you look up 'Go:golang.org/x/net' on OSV.dev and tell me if there are any unpatched vulnerabilities or security advisories I need to worry about right now?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory IDs, vulnerability descriptions, severity information, and recommended patched versions for the queried open-source package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty or no-vulnerability result","Invalid ecosystem prefix causes malformed query","OSV.dev upstream unavailability leads to timeout or error","Ambiguous package name without ecosystem prefix may return unexpected results","Payment failure (HTTP 402) blocks access if x402 funds are insufficient"],"whenToPreferThis":"Choose this endpoint when you need real-time, live CVE and GHSA vulnerability data for a specific open-source package across PyPI, npm, Go, or Rust ecosystems. It is backed directly by Google OSV.dev intelligence, making it preferable over static or cached vulnerability databases when up-to-date advisory data matters for security audits, CI/CD pipelines, or dependency vetting.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:25.610Z","isFirstParty":false,"canonicalSlug":"x402-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-ed5903c2"}