{"uid":"cap_JK3weqG-wXnJEg6qSx99f","slug":"cve-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-ff4f668d","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://cve-intel.agentdiet.dev/v1)","url":"https://cve-intel.agentdiet.dev/v1?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_SruCa_JDUSc3T3yEtEMsn","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"cve-intel.agentdiet.dev","brandSlug":"cve-intel-agentdiet-dev-mpp","brandBaseUrl":"https://cve-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories, and tell me what patched versions are available?","exampleUseCases":[{"title":"Audit Python dependency before release","prompt":"Before I ship my new Python app, can you scan the 'PyPI:cryptography' package for any known CVEs or GHSA advisories and let me know which version I should upgrade to?"},{"title":"Check npm package for active exploits","prompt":"I'm using lodash in my Node.js project — can you check if 'npm:lodash' has any active security vulnerabilities or advisories I should know about?"},{"title":"Rust crate security review","prompt":"Can you pull up any CVEs or GHSA advisories for the Rust crate 'crates.io:hyper' and tell me if there are patched versions available?"}],"resultDescription":"Returns a list of active vulnerability records for the queried package, including CVE identifiers, GHSA advisory IDs, severity ratings, affected version ranges, and recommended patched versions sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty vulnerability list or 404-style response","Invalid package identifier format — API may return a validation error if 'Ecosystem:name' format is malformed","Ecosystem not supported — only PyPI, npm, Go, and crates.io are supported; other ecosystems may fail or return no data","OSV.dev upstream unavailable — endpoint may return a 503 or timeout if the upstream data source is down","Payment not completed — x402 payment required; missing or failed payment returns 402 status"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from Google OSV.dev for open-source packages across PyPI, npm, Go, or Rust ecosystems, especially when you need CVE and GHSA advisory details with patched version recommendations. Prefer this over static advisory databases when freshness matters, or when you need to programmatically audit a dependency in an automated pipeline.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:37.626Z","isFirstParty":false,"canonicalSlug":"cve-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-46a5ff78"}