{"uid":"cap_MVEk3BFHgWixZBsvYQSUX","slug":"defi-yield-agentdiet-dev-real-time-open-source-package-cve-ghsa-90d35668","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://defi-yield.agentdiet.dev/v1/epss-scanner)","url":"https://defi-yield.agentdiet.dev/v1/epss-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_M8Asuu-3xTAqj75I6QNPn","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"defi-yield.agentdiet.dev","brandSlug":"defi-yield-agentdiet-dev-mpp","brandBaseUrl":"https://defi-yield.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for any PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any known CVEs or GHSA security advisories, and tell me which versions are patched?","exampleUseCases":[{"title":"Auditing Python dependencies for vulnerabilities","prompt":"I'm reviewing my requirements.txt — can you check if PyPI:cryptography has any active CVEs or security advisories and what version I should upgrade to?"},{"title":"Checking npm package before production deploy","prompt":"Before we ship this, can you scan npm:lodash for any known vulnerabilities or GHSA advisories so I know if we need to upgrade?"},{"title":"Rust crate supply chain security check","prompt":"We're adding crates.io:hyper to our Rust project — does it have any outstanding CVEs or patched versions I should be aware of?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory IDs, severity ratings, affected version ranges, and the versions in which vulnerabilities have been patched, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty or null vulnerability list","Invalid ecosystem prefix causes query failure or empty results","OSV.dev upstream unavailability leads to timeout or error response","Malformed package identifier (missing ecosystem prefix) may yield no results","Payment failure via x402 prevents endpoint access"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability intelligence from Google OSV.dev for a specific open source package across PyPI, npm, Go modules, or Rust crates — especially when you want both CVE and GHSA advisory data with patched version recommendations in a single call, without maintaining your own vulnerability database.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:22:44.109Z","isFirstParty":false,"canonicalSlug":"defi-yield-agentdiet-dev-real-time-open-source-package-cve-ghsa-51fcf624"}