{"uid":"cap_SunocTi3XheZ-NblJIs4t","slug":"cve-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-9dc9e75e","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://cve-intel.agentdiet.dev/api)","url":"https://cve-intel.agentdiet.dev/api?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_97eTOu3GLsZXcWKQP5qP6","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"cve-intel.agentdiet.dev","brandSlug":"cve-intel-agentdiet-dev-mpp","brandBaseUrl":"https://cve-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time for known CVEs and GHSA advisories affecting a named open-source package (PyPI, npm, Go, Rust) and returns vulnerability details and patched versions.","exampleAgentPrompt":"Can you check if the npm package lodash has any active CVEs or GHSA security advisories right now, and tell me what patched versions I should upgrade to?","exampleUseCases":[{"title":"Audit Python dependency for vulnerabilities","prompt":"I'm using the PyPI package requests in my project — can you check if it has any known CVEs or security advisories and tell me which version fixes them?"},{"title":"Pre-release Go module security check","prompt":"Before we ship, can you scan golang.org/x/net for any active vulnerabilities on OSV.dev and tell me if there's a patched version we should pin?"},{"title":"Rust crate security review","prompt":"Does the Rust crate hyper on crates.io have any unpatched CVEs or GHSA advisories I should know about?"}],"resultDescription":"Returns a structured list of active vulnerabilities for the queried package, including CVE IDs, GHSA advisory identifiers, vulnerability summaries, affected version ranges, and the versions in which issues have been patched, all sourced live from Google OSV.dev.","failureModes":["Unknown or misspelled package name returns no results or an error","Unsupported ecosystem causes a query failure","OSV.dev upstream downtime may result in a timeout or error response","Ambiguous package name without ecosystem prefix may match the wrong package","Rate limiting or payment failure (HTTP 402) if the per-call fee is not settled"],"whenToPreferThis":"Choose this endpoint when you need real-time, up-to-date CVE and GHSA vulnerability data for a specific open-source package across PyPI, npm, Go modules, or Rust crates — especially when freshness matters and you want data sourced directly from Google OSV.dev rather than a cached or static database.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:38.457Z","isFirstParty":false,"canonicalSlug":"cve-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-46a5ff78"}