{"uid":"cap_BvYwH_Ej3dYQvXCuPQgSk","slug":"email-verify-agentdiet-dev-real-time-open-source-package-cve-ghsa-e53ea358","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://email-verify.agentdiet.dev/v1/epss-scanner)","url":"https://email-verify.agentdiet.dev/v1/epss-scanner?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_M9e2mV_WMbmg56aB_d3_y","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"email-verify.agentdiet.dev","brandSlug":"email-verify-agentdiet-dev-mpp","brandBaseUrl":"https://email-verify.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories, and tell me which versions are patched?","exampleUseCases":[{"title":"Audit Python dependency before release","prompt":"Before we ship our new release, can you scan the PyPI:cryptography package for any active CVEs or GHSA advisories and tell me the earliest patched version I should upgrade to?"},{"title":"Check npm package for known exploits","prompt":"I'm using lodash in our Node.js app — can you pull any current CVEs or GHSA advisories for npm:lodash and flag which versions have fixes?"},{"title":"Verify Go module security posture","prompt":"We depend on golang.org/x/net in our Go services — can you check OSV.dev for any open vulnerabilities or GHSA advisories against that module right now?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory IDs, affected version ranges, severity metadata, and recommended patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Unknown or misspelled package name returns empty vulnerability list or error","Unsupported ecosystem format causes validation failure","OSV.dev upstream unavailability results in timeout or 503 error","Ambiguous package identifier without ecosystem prefix may return incorrect results","Rate limiting or payment failure (HTTP 402) if credits are exhausted"],"whenToPreferThis":"Choose this endpoint when you need real-time, authoritative vulnerability data for open-source packages across PyPI, npm, Go modules, or Rust crates — especially when you want CVE and GHSA advisory coverage in a single call backed by Google OSV.dev intelligence rather than a static NVD snapshot or commercial scanner.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:30:25.319Z","isFirstParty":false,"canonicalSlug":"email-verify-agentdiet-dev-real-time-open-source-package-cve-ghsa-202bd7ef"}