{"uid":"cap_U-cVsS-UgIn5xci1H-7P4","slug":"vextorium-cve-vulnerability-info-lookup-2b2e6500","name":"Vextorium CVE/Vulnerability Info Lookup","description":"244 pay-per-call data APIs for AI agents: official statistics and economy (ECB, Fed, Eurostat, World Bank, SEC, BOE, INE), crypto prices and sentiment, Spanish public data, compliance (sanctions, VAT, IBAN, LEI), science, weather, web and developer tools and local AI text tools. Pay in USDC via x402.","url":"https://api.vextorium.com/v1/cve-info?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"identifier":{"type":"string"}}},"responseSchema":{"type":"json","example":{"id":"CVE-2021-44228","cvss":["CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"],"title":"Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints","source":"CVE® (MITRE), from the official CVE Services API.","status":"PUBLISHED","license":"Copyright © 1999-2026, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. License: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly di…","affected":[{"product":"Apache Log4j2","provider":"Apache Software Foundation","versions":["2.0-beta9 < log4j-core*"]}],"modified":"2025-10-21T23:25:23.121Z","severity":"CRITICAL","published":"2021-12-10T00:00:00.000Z","references":["https://logging.apache.org/log4j/2.x/security.html","http://www.openwall.com/lists/oss-security/2021/12/10/1"],"description":"Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message p…"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_w4vqXMgA631C0pYByEwkl","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns detailed vulnerability data for a given CVE, GHSA, or PYSEC identifier, including severity, CVSS vector, affected packages, fixed versions, and references, sourced from OSV.dev.","exampleAgentPrompt":"Can you pull up the full vulnerability details for CVE-2021-44228 — I need the CVSS score, severity, affected packages, fixed versions, and any relevant references?","exampleUseCases":[{"title":"Triage critical Log4Shell vulnerability","prompt":"Give me the full details on CVE-2021-44228 — what's the CVSS score, how severe is it, which packages are affected, and what versions fix it?"},{"title":"Investigate a GitHub Security Advisory","prompt":"Look up GHSA-jfh8-c2jp-5v3q for me — I need the description, severity rating, CVSS vector, and which package versions address the issue."},{"title":"Check Python package advisory details","prompt":"Can you fetch the details for PYSEC-2022-42969? I want to know what the vulnerability is, how critical it is, and what fixed versions exist."}],"resultDescription":"A JSON object containing the vulnerability ID, aliases (e.g. GHSA/CVE cross-references), CVSS vector strings, severity rating, a textual description, publication and modification timestamps, a list of affected packages with their ecosystems and corrected commit hashes or versions, and an array of external reference URLs. Data is sourced from OSV.dev under CC BY 4.0.","failureModes":["Unknown or invalid identifier returns null or empty result","Identifier format not recognized (e.g. malformed CVE string) may return an error","OSV.dev upstream data lag may mean very recent CVEs have incomplete or missing entries","Some fields (severity, summary, package ecosystem) may be null if OSV.dev lacks that data","Network or upstream timeout may cause request failure"],"whenToPreferThis":"Use this endpoint when you need structured, machine-readable vulnerability details for a specific CVE, GHSA, or PYSEC identifier and want OSV.dev-sourced data including CVSS vectors, affected packages, and fixed versions. Prefer this over general web search when you need reliable, normalized advisory data for automated security workflows, dependency audits, or vulnerability triage pipelines.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-27T19:14:37.513Z","isFirstParty":false,"canonicalSlug":"vextorium-cve-vulnerability-info-lookup-2b2e6500"}