{"uid":"cap_Wr5yE5hQwX9ciifJlw0oE","slug":"polymarket-odds-agentdiet-dev-real-time-open-source-package-cve-ghsa-bd0dd4f4","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://polymarket-odds.agentdiet.dev/v1/maven-vuln-scanner)","url":"https://polymarket-odds.agentdiet.dev/v1/maven-vuln-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_eyNUOoEWDb0sNVu8jQdrJ","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"polymarket-odds.agentdiet.dev","brandSlug":"polymarket-odds-agentdiet-dev-mpp","brandBaseUrl":"https://polymarket-odds.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me which versions have patches?","exampleUseCases":[{"title":"Dependency audit before production deploy","prompt":"Before I ship this update, can you scan the npm package lodash for any active CVEs or security advisories and tell me which version I should upgrade to?"},{"title":"Security check for Go module","prompt":"Does golang.org/x/net have any known vulnerabilities right now? I need the CVE IDs, GHSA advisories, and the patched version if one exists."},{"title":"Rust crate vulnerability review","prompt":"I'm using the crates.io hyper package in my Rust project — can you check OSV.dev and tell me if there are any open security issues or advisories I should know about?"}],"resultDescription":"Returns a structured list of active vulnerabilities for the queried package, including CVE identifiers, GHSA advisory IDs, severity information, affected version ranges, and recommended patched versions sourced live from Google OSV.dev.","failureModes":["Unknown or misspelled package name returns no results or an error","Unsupported ecosystem prefix causes a validation error","OSV.dev upstream unavailability leads to a timeout or 503 response","Malformed 'Ecosystem:name' format may return empty results","Package with no known vulnerabilities returns an empty advisory list"],"whenToPreferThis":"Choose this endpoint when you need real-time CVE and GHSA vulnerability data for open-source packages across PyPI, npm, Go, or Rust ecosystems. It is backed directly by Google OSV.dev, making it more current than static NVD mirrors. Prefer it for automated dependency auditing, CI/CD security gating, or agent-driven supply chain risk checks where up-to-date patch information is critical.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:22:41.407Z","isFirstParty":false,"canonicalSlug":"polymarket-odds-agentdiet-dev-real-time-open-source-package-cve-ghsa-ee8fb9b9"}