{"uid":"cap_6LGxdAS1z58lDjaL3gQFq","slug":"agentdiet-dev-real-time-open-source-package-cve-ghsa-vulnerability-4bcd09f4","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://agentdiet.dev/v1/ghsa-advisories)","url":"https://agentdiet.dev/v1/ghsa-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_QF8mKm6-Q6kFAU_B9OPus","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"agentdiet.dev","brandSlug":"agentdiet-dev-mpp","brandBaseUrl":"https://agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev for live CVE and GHSA vulnerability advisories for PyPI, npm, Go, or Rust crate packages, returning active vulnerabilities and patched versions.","exampleAgentPrompt":"Can you check if the npm package lodash has any active CVEs or GHSA security advisories right now, and tell me what versions have patches?","exampleUseCases":[{"title":"Dependency security audit before release","prompt":"Before we ship this release, can you scan the PyPI:requests package for any active CVEs or GHSA advisories and tell me if there are patched versions available?"},{"title":"Rust crate vulnerability check","prompt":"Is the Rust crate crates.io:hyper currently affected by any known security vulnerabilities or GitHub Security Advisories?"},{"title":"Go module CVE screening","prompt":"Can you look up any active CVE or GHSA advisories for the Go module Go:golang.org/x/net and let me know the severity and whether a fix has been released?"}],"resultDescription":"Returns a list of active CVE and GHSA vulnerability advisories for the requested package, including advisory IDs, descriptions, severity levels, affected version ranges, and available patched versions sourced from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty advisory list or 404-like response","Unsupported ecosystem specified — may return error if ecosystem prefix is unrecognized","Malformed package identifier — missing or incorrect 'Ecosystem:name' format causes validation error","OSV.dev upstream unavailability — service may return timeout or upstream error","No vulnerabilities found — returns empty result, which may be misread as an error"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data for open-source packages across PyPI, npm, Go, or Rust ecosystems sourced directly from Google OSV.dev. Prefer it over static SBOM scanners or bundled vulnerability databases when freshness matters and you want current CVE and GHSA advisory status without running a local scanner.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:01.542Z","isFirstParty":false,"canonicalSlug":"agentdiet-dev-real-time-open-source-package-cve-ghsa-vulnerability-4f9f77b3"}