{"uid":"cap_H9CGaHCxxmLoPRtaBqzXe","slug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-5e80e958","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/ghsa-advisories)","url":"https://serp-extract.agentdiet.dev/v1/ghsa-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"limit":{"type":"integer","default":20,"maximum":100,"minimum":1,"description":"Maximum number of items to return per page (1-100)"},"cursor":{"type":"string","description":"Opaque pagination cursor for fetching the next page"},"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm__VasZpEAhBjE-osAEwIBp","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for PyPI, npm, Go, or Rust packages","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any known CVEs or GHSA security advisories, and tell me which versions are patched?","exampleUseCases":[{"title":"Auditing Python dependencies for vulnerabilities","prompt":"I'm reviewing our Python project's dependencies — can you look up whether PyPI:requests has any active CVEs or GHSA advisories and which version I should upgrade to?"},{"title":"Checking npm package before production deploy","prompt":"Before we ship this release, check if npm:lodash has any known security vulnerabilities or GitHub Security Advisories I should be aware of."},{"title":"Rust crate supply chain security check","prompt":"Can you scan crates.io:hyper for any active CVEs or GHSA advisories and tell me which patched version I should be using?"}],"resultDescription":"A JSON object containing vulnerability records from OSV.dev for the queried package, including CVE identifiers, GHSA advisory IDs, severity information, affected version ranges, and recommended patched versions.","failureModes":["Package not found in OSV.dev database — returns empty or error response","Invalid ecosystem or package format causes query failure","No known vulnerabilities returns an empty advisories list (not an error)","OSV.dev upstream unavailability causes timeout or 5xx response","Malformed package identifier format (missing colon separator) may return incorrect results"],"whenToPreferThis":"Use this endpoint when you need real-time, live vulnerability data from Google OSV.dev for open source packages across PyPI, npm, Go modules, or Rust crates. Prefer this over static NVD or local database lookups when freshness matters or when you need GHSA advisories alongside CVEs. Ideal for automated dependency audits, CI/CD pipeline security gates, or agent-driven supply chain risk assessments.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:09.021Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-5ca26ef1"}