{"uid":"cap_IRwJNGqmX6DZaJ7V1Dnye","slug":"vextorium-vulnerability-info-cve-ghsa-pysec-lookup-8b15121e","name":"Vextorium Vulnerability Info (CVE/GHSA/PYSEC Lookup)","description":"Details of a vulnerability by id (CVE-2021-44228, GHSA-..., PYSEC-...): summary, description, severity and CVSS vector, affected packages, fixed versions and references. OSV.dev data.","url":"https://api.vextorium.com/vulnerabilidad-info-pago?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"identificador":{"type":"string"}}},"responseSchema":{"type":"json","example":{"id":"CVE-2021-44228","cvss":["CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"],"alias":["GHSA-jfh8-c2jp-5v3q"],"fuente":"OSV.dev (CC BY 4.0)","resumen":null,"gravedad":null,"afectados":[{"paquete":null,"ecosistema":null,"corregida_en":["38513a7d57343881f7bf58f37e67d6a87e0a47c5","ad361d2e517e765f69db464d9407ac2dd80bc93e"]}],"publicada":"2021-12-10T10:15:09.143Z","modificada":"2026-08-13T04:01:09.237466383Z","descripcion":"Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message p…","referencias":["https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md","http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html"]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_zTbGhTX4MqdgkGMlZo49C","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns detailed vulnerability information for a given CVE, GHSA, or PYSEC identifier, including severity, CVSS vector, affected packages, fixed versions, and references, sourced from OSV.dev.","exampleAgentPrompt":"Can you pull up the full vulnerability details for CVE-2021-44228, including the CVSS score, which packages are affected, and what versions fix it?","exampleUseCases":[{"title":"Log4Shell severity assessment","prompt":"I need to know the CVSS vector and severity rating for CVE-2021-44228 — can you look it up and tell me how serious it is and which versions of Log4j are affected?"},{"title":"Python package vulnerability check","prompt":"Look up PYSEC-2022-42969 for me — I want to see the description, what Python package is affected, and whether there's a fixed version available."},{"title":"GitHub Advisory details lookup","prompt":"Can you fetch all the details for GHSA-jfh8-c2jp-5v3q? I need the aliases, references, affected packages, and the publication date so I can include it in our security report."}],"resultDescription":"Returns a JSON object with the vulnerability's OSV ID, CVSS vector string(s), alias identifiers (e.g. GHSA or CVE cross-references), source attribution (OSV.dev CC BY 4.0), summary, severity, list of affected packages and ecosystems with fixed versions or commit hashes, publication and modification timestamps, full description text, and an array of reference URLs.","failureModes":["Unknown or invalid vulnerability ID returns null or empty result","Malformed identifier format causes request failure","Vulnerability not yet indexed in OSV.dev returns no data","Network timeout for slow OSV.dev upstream responses","Missing fields (resumen, gravedad, paquete) may be null if OSV.dev data is incomplete"],"whenToPreferThis":"Choose this endpoint when you need structured, machine-readable vulnerability details from OSV.dev for a specific CVE, GHSA, or PYSEC identifier — particularly when you need CVSS scores, affected package ecosystems, and fixed version data in a single call. Prefer it over raw NVD or GitHub Advisory queries when you want a unified OSV-format response with cross-identifier aliases.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-16T18:43:17.794Z","isFirstParty":false,"canonicalSlug":"vextorium-vulnerability-info-cve-ghsa-pysec-lookup-8b15121e"}