{"uid":"cap_AcS6WWZn3kFLErLdMtasS","slug":"prompt-guard-agentdiet-dev-real-time-open-source-package-cve-ghsa-47947695","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://prompt-guard.agentdiet.dev/v1/epss-scanner)","url":"https://prompt-guard.agentdiet.dev/v1/epss-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_FH-hBiybivhapKzq6ufW4","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"prompt-guard.agentdiet.dev","brandSlug":"prompt-guard-agentdiet-dev-mpp","brandBaseUrl":"https://prompt-guard.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, EPSS scores, and patched versions for any PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Can you scan the PyPI requests package for any active CVEs or GHSA advisories and tell me which versions have patches available?","exampleUseCases":[{"title":"Python dependency security audit","prompt":"Check if the PyPI package 'requests' has any known CVEs or GitHub security advisories, and let me know which version I should upgrade to in order to be safe."},{"title":"Node.js package vulnerability check","prompt":"I'm using lodash in my Node project — can you look it up on OSV.dev and tell me if there are any active CVEs or GHSA advisories I should know about, and what the patched version is?"},{"title":"Rust crate supply chain risk check","prompt":"Before I add the crates.io hyper package to my project, can you scan it for any known vulnerabilities or security advisories and tell me if the current version is safe to use?"}],"resultDescription":"Returns a structured response listing active CVEs, GHSA advisory identifiers, vulnerability severity details (including EPSS scores), affected version ranges, and recommended patched versions for the queried open-source package.","failureModes":["Unknown or misspelled package name returns empty or error response","Ecosystem prefix omitted may cause ambiguous resolution across ecosystems","OSV.dev upstream downtime or rate limits may cause request failures","Very new packages with no advisories return empty vulnerability lists","Malformed 'Ecosystem:name' format may result in a validation error"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability intelligence for open-source packages across PyPI, npm, Go modules, or Rust crates, backed by Google OSV.dev's continuously updated advisory database. Prefer this over static or cached vulnerability databases when freshness of CVE and GHSA data is critical — for example, during CI/CD pipeline checks, dependency audits, or agent-driven security workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:04.946Z","isFirstParty":false,"canonicalSlug":"prompt-guard-agentdiet-dev-real-time-open-source-package-cve-ghsa-d9b60b38"}