{"uid":"cap_2hsAdUpItC22XGvBDVjs6","slug":"node-fetch-cve-and-advisory-reference-mapping-78bba1fb","name":"node-fetch CVE and Advisory Reference Mapping","description":"node-fetch CVE and advisory reference mapping: CVE and advisory reference mapping for npm package node-fetch, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.","url":"https://market.datapackvibe.com/x402/signal-osv-npm-node-fetch-cve-map?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"package":{"type":"string","default":"node-fetch","maxLength":150},"version":{"type":"string","default":"latest","maxLength":100},"page_token":{"type":"string","maxLength":4000}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_A1O3uDQHzyMAYMeo7nRiC","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns CVE identifiers and security advisory references for a specific version of the npm package node-fetch, sourced from the OSV database.","exampleAgentPrompt":"Can you check if node-fetch version 2.6.7 has any known CVEs or security advisories from the OSV database?","exampleUseCases":[{"title":"Dependency audit before production deploy","prompt":"Before we ship, can you check node-fetch version 2.6.1 for any known CVEs or security advisories so we know if we need to upgrade?"},{"title":"Latest version vulnerability check","prompt":"Look up whether the latest version of node-fetch has any open security advisories or CVEs I should be aware of."},{"title":"Pinned dependency security review","prompt":"We're pinned to node-fetch 2.3.0 in our lockfile — can you pull all CVEs and OSV advisories for that exact version so I can assess the risk?"}],"resultDescription":"A structured list of CVE identifiers and OSV advisory references associated with the specified version of the node-fetch npm package, including vulnerability details and links to advisories. Supports pagination via page_token for large result sets.","failureModes":["Unknown or malformed version string returns no results or an error","Package field overridden to a non-node-fetch package may return out-of-scope results","Paginated results require correct page_token or records may be missed","OSV database may have a lag in reflecting newly published CVEs","Network or payment authorization failure returns a non-200 response"],"whenToPreferThis":"Use this endpoint when you specifically need CVE and advisory data for the node-fetch npm package scoped exactly to that package's OSV records. It is pre-scoped to node-fetch, making it faster and more targeted than a general OSV query tool. Prefer it when auditing a Node.js project that uses node-fetch and you want a quick per-version vulnerability check without setting up a full OSV API client.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T00:52:44.756Z","isFirstParty":false,"canonicalSlug":"node-fetch-cve-and-advisory-reference-mapping-78bba1fb"}