{"uid":"cap_CK-Zo-653xYsUC_b4ATxP","slug":"shopify-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-6afa8fba","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://shopify-intel.agentdiet.dev/v1/zero-day-advisories)","url":"https://shopify-intel.agentdiet.dev/v1/zero-day-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_G34dJFaaPwo54zXppJvqn","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"shopify-intel.agentdiet.dev","brandSlug":"shopify-intel-agentdiet-dev-mpp","brandBaseUrl":"https://shopify-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the npm package lodash has any active CVEs or GHSA security advisories, and tell me what the patched version is?","exampleUseCases":[{"title":"Dependency security audit before release","prompt":"Before I ship this release, can you scan the PyPI package 'requests' for any active CVEs or GHSA advisories and tell me which version I should upgrade to?"},{"title":"Rust crate vulnerability check","prompt":"I'm using the crates.io hyper package in my Rust project — does it have any known security vulnerabilities or advisories I should be aware of right now?"},{"title":"Go module zero-day advisory lookup","prompt":"Check the Go module golang.org/x/net for any active CVEs or zero-day advisories from OSV.dev and let me know if there are patched versions available."}],"resultDescription":"Returns a list of active vulnerabilities for the queried package, including CVE IDs, GHSA advisory identifiers, affected version ranges, severity information, and the versions in which each vulnerability has been patched, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty vulnerability list or 404-style error","Invalid ecosystem prefix causes parsing failure — ensure format is 'Ecosystem:name' (e.g. 'PyPI:requests')","OSV.dev upstream outage may cause timeout or 503 response","Payment failure (HTTP 402) if x402 micropayment is not processed correctly","Malformed package identifier returns validation error"],"whenToPreferThis":"Use this endpoint when you need real-time, live vulnerability data from OSV.dev for a specific open-source package in PyPI, npm, Go, or Rust ecosystems, especially when you want structured CVE and GHSA advisory output with patched version guidance. Prefer this over static vulnerability databases when freshness matters — e.g., during CI/CD pipelines, pre-release audits, or when responding to a newly disclosed CVE. It is not suited for proprietary/closed-source packages or ecosystems not supported by OSV.dev.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:07.228Z","isFirstParty":false,"canonicalSlug":"shopify-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-5faff5d6"}