{"uid":"cap_Qpyw-r8cS3Un7Mnm9ecGR","slug":"fittings-github-advisory-database-lookup-db35bb88","name":"fittings GitHub Advisory Database Lookup","description":"The full GitHub Advisory Database record for a GHSA or CVE id: severity, CVSS, EPSS, CWEs, and the affected package and version ranges per ecosystem.","url":"https://fittings.sh/v1/ghsa/advisory?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["id"],"properties":{"id":{"type":"string","description":"GHSA id (GHSA-jfh8-c2jp-5v3q) or CVE id (CVE-2021-44228)"},"maxAffected":{"type":"number","description":"Affected package rows to return, 1-100, default 20"},"includeDescription":{"type":"boolean","description":"Include the full advisory text, default false"}}}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.00399","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.00399/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.00399","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.00399","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_6c9Nhhq4RIC08jm0120Ci","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.00399","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves the full GitHub Advisory Database record for a given GHSA or CVE identifier, including severity, CVSS, EPSS, CWEs, and affected package version ranges per ecosystem.","exampleAgentPrompt":"Can you look up the GitHub Advisory Database record for CVE-2021-44228 — I need the severity, CVSS score, EPSS score, CWEs, and the affected package version ranges?","exampleUseCases":[{"title":"Log4Shell vulnerability triage","prompt":"Pull up the full advisory for CVE-2021-44228 — I need the CVSS score, EPSS, CWEs, and which versions of which packages are affected."},{"title":"Supply chain risk assessment","prompt":"Get the GHSA record for GHSA-jfh8-c2jp-5v3q including the full advisory description and all affected package version ranges across ecosystems."},{"title":"Automated dependency vulnerability check","prompt":"For the advisory GHSA-2qrg-x229-3v8q, show me the severity, CVSS and EPSS scores, and up to 50 affected package rows so I can check our dependencies."}],"resultDescription":"Returns the full GitHub Advisory Database record including: severity level, CVSS base score, EPSS probability score, CWE identifiers, and a list of affected packages with their version ranges per ecosystem (e.g., npm, PyPI, Maven). Optionally includes the full advisory text description.","failureModes":["Unknown or invalid GHSA/CVE ID returns an error or empty result","Advisory not yet published or embargoed may return no data","maxAffected out of range (outside 1-100) may return a validation error","Network or upstream GitHub Advisory Database availability issues causing timeouts"],"whenToPreferThis":"Use this endpoint when you need structured, machine-readable vulnerability metadata (severity, CVSS, EPSS, CWEs, affected version ranges) for a known GHSA or CVE identifier. It is ideal for automated dependency scanning, security triage pipelines, or enriching vulnerability reports with authoritative GitHub Advisory Database data. Prefer this over NVD or OSV lookups when you specifically need GitHub Advisory Database records with ecosystem-level package version ranges.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-10T06:49:17.561Z","isFirstParty":false,"canonicalSlug":"fittings-github-advisory-database-lookup-db35bb88"}