{"uid":"cap_Gccv3XrKWwS71ubKUHT6P","slug":"polymarket-odds-agentdiet-dev-real-time-open-source-package-cve-ghsa-3114fe06","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://polymarket-odds.agentdiet.dev/v1/cve-lookup)","url":"https://polymarket-odds.agentdiet.dev/v1/cve-lookup?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_xdelsp8vWIucKCZ3H_Vh_","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"polymarket-odds.agentdiet.dev","brandSlug":"polymarket-odds-agentdiet-dev-mpp","brandBaseUrl":"https://polymarket-odds.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for any PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories, and tell me which versions have patches available?","exampleUseCases":[{"title":"Auditing Python dependencies for CVEs","prompt":"I'm about to ship a Python project that uses requests, flask, and pydantic — can you check each of those PyPI packages for any known CVEs or GHSA advisories and tell me which ones need to be upgraded?"},{"title":"Vetting an npm package before adoption","prompt":"Before I add lodash to our project, can you look up whether it has any active security vulnerabilities on OSV.dev and what the patched version would be?"},{"title":"Rust crate security review","prompt":"We're using the hyper crate in our Rust service — can you scan it on crates.io for any known CVEs or security advisories and let me know if we're at risk?"}],"resultDescription":"Returns a structured object listing active CVE identifiers, GHSA advisory references, severity information, affected version ranges, and recommended patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Package not found in the specified ecosystem — returns empty or error response","Invalid ecosystem prefix causes request rejection","OSV.dev upstream unavailable causing timeout or degraded response","Malformed package identifier format returns validation error","Package with no known vulnerabilities returns empty advisory list"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from Google OSV.dev for open source packages across PyPI, npm, Go modules, or Rust crates. It is ideal for automated dependency auditing, CI/CD security gates, or agent-driven supply chain risk checks where up-to-date CVE and GHSA data is required rather than a cached or periodic snapshot.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:37:32.033Z","isFirstParty":false,"canonicalSlug":"polymarket-odds-agentdiet-dev-real-time-open-source-package-cve-ghsa-ee8fb9b9"}