{"uid":"cap_5Lvey6LSPFiAUQ6eBt-ss","slug":"polymarket-odds-agentdiet-dev-real-time-open-source-package-cve-ghsa-f0601a03","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://polymarket-odds.agentdiet.dev/v1/cve-lookup)","url":"https://polymarket-odds.agentdiet.dev/v1/cve-lookup?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_yKSDI5vIsOnf4t7BIsMpF","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"polymarket-odds.agentdiet.dev","brandSlug":"polymarket-odds-agentdiet-dev-mpp","brandBaseUrl":"https://polymarket-odds.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real-time to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Check OSV.dev for any active CVEs or GHSA security advisories affecting the npm package lodash — I want to know what vulnerabilities exist and which versions have patches.","exampleUseCases":[{"title":"Audit Python dependency before deployment","prompt":"Before we deploy, can you check OSV.dev for any known CVEs or security advisories on PyPI:requests? I need to know if there are patched versions we should upgrade to."},{"title":"Scan Go module for supply chain risk","prompt":"Look up vulnerabilities on OSV.dev for the Go module golang.org/x/net — list any active CVEs, GHSA advisories, and which versions fix them."},{"title":"Rust crate security review","prompt":"We're using the hyper crate in our Rust project — can you query OSV.dev to see if there are any open vulnerabilities or advisories for crates.io:hyper and tell me the safe versions?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory IDs, affected version ranges, severity information, and available patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Package not found or unrecognized ecosystem returns empty or error response","Malformed package identifier (missing ecosystem prefix) may cause ambiguous lookup or error","OSV.dev upstream downtime results in failed or stale response","Rate limiting or payment failure (HTTP 402) blocks the request","Package with no known vulnerabilities returns an empty advisories list, which may be misread as an error"],"whenToPreferThis":"Choose this endpoint when you need real-time, authoritative vulnerability data for open-source packages across PyPI, npm, Go, or Rust ecosystems — especially when you want live CVE and GHSA advisories sourced directly from Google OSV.dev rather than a cached or third-party database. Prefer it for automated dependency audits, CI/CD security gates, or agent-driven supply chain risk checks where freshness of vulnerability intelligence matters.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:46:50.839Z","isFirstParty":false,"canonicalSlug":"polymarket-odds-agentdiet-dev-real-time-open-source-package-cve-ghsa-ee8fb9b9"}