{"uid":"cap_IHkDTAWZOH5R5xhcT5Kpu","slug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-a3fca734","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/zero-day-advisories)","url":"https://serp-extract.agentdiet.dev/v1/zero-day-advisories?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_xxUpRrCRXSbFAjQDuQlym","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev for live CVE and GHSA vulnerability advisories for a given PyPI, npm, Go, or Rust crate package and returns active vulnerabilities with patched versions.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me which versions have patches?","exampleUseCases":[{"title":"Dependency audit before production deploy","prompt":"Before we ship this release, can you scan the npm package 'lodash' for any known CVEs or GHSA advisories and tell me if there are patched versions available?"},{"title":"Security check for a Rust crate","prompt":"I'm adding 'hyper' from crates.io to my Rust project — can you check if it has any active vulnerabilities or security advisories I should know about?"},{"title":"Go module vulnerability scan","prompt":"Can you look up any CVEs or GHSA advisories for the Go module 'golang.org/x/net' and let me know which versions fix the issues?"}],"resultDescription":"Returns a structured list of active vulnerability records for the queried package, including CVE IDs, GHSA advisory identifiers, severity ratings, affected version ranges, and patched/fixed versions sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty advisory list or error","Invalid ecosystem prefix causes parsing error","OSV.dev upstream timeout results in service error","Malformed package identifier (missing ecosystem) leads to validation error","Package has no known vulnerabilities — returns empty result set"],"whenToPreferThis":"Use this endpoint when you need real-time, live vulnerability data from Google OSV.dev for a specific open-source package across PyPI, npm, Go, or Rust ecosystems. Prefer it over static NVD database lookups when you need the freshest CVE and GHSA advisory data, including very recent disclosures that may not yet appear in cached sources.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:34:50.333Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-5ca26ef1"}