{"uid":"cap_AkGgpjFc22G-rNRUnwwa-","slug":"github-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-706dd688","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/go-module-cve)","url":"https://github-audit.agentdiet.dev/v1/go-module-cve?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_FJjbbsjsk5zSj1GFIaBwG","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"github-audit.agentdiet.dev","brandSlug":"github-audit-agentdiet-dev-mpp","brandBaseUrl":"https://github-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for any PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Can you check the PyPI:requests package for any active CVEs or GHSA security advisories right now and tell me what versions have fixes?","exampleUseCases":[{"title":"Pre-deploy dependency security check","prompt":"Before I deploy, can you scan PyPI:flask for any known CVEs or GHSA advisories and tell me the earliest patched version I should upgrade to?"},{"title":"CI pipeline vulnerability gate","prompt":"Check npm:lodash for active security vulnerabilities using OSV.dev — I need to know if there are any open CVEs and which version resolves them."},{"title":"Go module audit for supply chain risk","prompt":"Can you pull the latest vulnerability advisories for Go:golang.org/x/net from OSV.dev and tell me all the CVEs and GHSA IDs that are currently active?"}],"resultDescription":"Returns a structured response containing active CVEs and GHSA advisory IDs affecting the queried package, the affected version ranges, severity information, and the minimum patched version(s) available, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev ecosystem — returns empty or no-vulnerability result","Malformed package identifier (missing ecosystem prefix) may yield incorrect ecosystem match","OSV.dev upstream API timeout or unavailability causes lookup failure","Package name typo results in no advisories returned even if real vulnerabilities exist","Ecosystem not supported (only PyPI, npm, Go, crates.io covered)"],"whenToPreferThis":"Prefer this endpoint when you need real-time, authoritative CVE and GHSA vulnerability data for open-source packages across PyPI, npm, Go, or Rust ecosystems, sourced directly from Google OSV.dev. Use it for pre-deployment security checks, CI/CD pipeline gates, or supply chain risk assessments where freshness of vulnerability data matters and you want advisory IDs with patched version guidance.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:22.507Z","isFirstParty":false,"canonicalSlug":"github-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-efe6e5d6"}