{"uid":"cap_D8eEl6o3unqzLRZQBRe7I","slug":"sec-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-320ae793","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://sec-intel.agentdiet.dev/v1/zero-day-advisories)","url":"https://sec-intel.agentdiet.dev/v1/zero-day-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_8H70e72rAqrKLzaYmr72j","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"sec-intel.agentdiet.dev","brandSlug":"sec-intel-agentdiet-dev-mpp","brandBaseUrl":"https://sec-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev for live CVE and GHSA vulnerability advisories for a given PyPI, npm, Go, or Rust package and returns active vulnerabilities and patched versions.","exampleAgentPrompt":"Check if the npm package lodash has any active CVEs or GHSA security advisories right now, and tell me which versions are patched.","exampleUseCases":[{"title":"Dependency security audit before release","prompt":"Before we ship, can you check whether PyPI:requests has any known CVEs or GHSA vulnerabilities I should be worried about, and tell me if there's a patched version available?"},{"title":"Rust crate vulnerability check","prompt":"We're using the crates.io hyper Rust crate — can you scan it for active CVEs or security advisories and let me know if we're on a vulnerable version?"},{"title":"Go module recon for security review","prompt":"I need to audit our Go dependencies — can you pull any live vulnerability advisories from OSV.dev for the package Go:golang.org/x/net and list any CVEs or GHSA IDs?"}],"resultDescription":"Returns a structured list of active CVE identifiers, GHSA advisory IDs, vulnerability descriptions, severity ratings, and available patched versions for the queried open-source package, sourced live from Google OSV.dev.","failureModes":["Package not found or unrecognized ecosystem returns empty results or error","Malformed package identifier (missing ecosystem prefix) may return no matches","OSV.dev upstream unavailability causes request failure","Rate limiting or payment failure (HTTP 402) if credits are exhausted","Packages with no known vulnerabilities return an empty advisory list"],"whenToPreferThis":"Use this endpoint when you need real-time, live vulnerability intelligence from Google OSV.dev specifically — covering PyPI, npm, Go modules, and Rust crates — and want structured CVE/GHSA output with patched version information. Prefer this over static database lookups when freshness matters, or when you need to programmatically check a specific package identifier before adding a dependency or shipping code.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:01.050Z","isFirstParty":false,"canonicalSlug":"sec-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-21cfcabe"}