{"uid":"cap_36_Ugku6J4hqexT8NwFcW","slug":"preflight-agentdiet-dev-real-time-open-source-package-cve-ghsa-6649337a","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://preflight.agentdiet.dev/v1/cve-intel)","url":"https://preflight.agentdiet.dev/v1/cve-intel?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_r4gDmjkpP2M60fXv8J2kO","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"preflight.agentdiet.dev","brandSlug":"preflight-agentdiet-dev-mpp","brandBaseUrl":"https://preflight.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time for a given package and returns active CVEs, GHSA advisories, and patched versions across PyPI, npm, Go, and Rust ecosystems.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA advisories, and tell me which versions are patched?","exampleUseCases":[{"title":"Audit Python dependency before deployment","prompt":"Before I deploy this app, can you scan the PyPI:requests package for any known CVEs or security advisories and tell me if I need to upgrade?"},{"title":"Check npm package for supply chain risk","prompt":"I'm using lodash in my Node project — can you pull up any active GHSA or CVE vulnerabilities for npm:lodash and show me which versions fix them?"},{"title":"Rust crate security review","prompt":"Can you look up any known vulnerabilities for the crates.io:hyper Rust package? I need to know if there are open CVEs and what the patched versions are."}],"resultDescription":"Returns a structured object listing active CVEs and GHSA advisories for the queried package, including severity ratings, affected version ranges, and the earliest patched version available, sourced live from Google OSV.dev.","failureModes":["Unknown or misspelled package name returns empty or error response","Unsupported ecosystem prefix causes validation failure","Package with no known vulnerabilities returns empty advisory list","OSV.dev upstream downtime may cause delayed or failed responses","Missing required 'package' parameter returns HTTP 400"],"whenToPreferThis":"Choose this endpoint when you need real-time, authoritative vulnerability data for open-source packages across PyPI, npm, Go, or Rust ecosystems, especially when you want CVE and GHSA advisory coverage in a single call backed by Google OSV.dev intelligence rather than a static or locally-cached database.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:02.479Z","isFirstParty":false,"canonicalSlug":"preflight-agentdiet-dev-real-time-open-source-package-cve-ghsa-6649337a"}