{"uid":"cap_Xf83gHjdJ2F1y5TOYdLcs","slug":"x402-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-75a93e15","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://x402-audit.agentdiet.dev/v1/ghsa-advisories)","url":"https://x402-audit.agentdiet.dev/v1/ghsa-advisories?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_7-WfkzVXFNudq-cu6wQOf","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"x402-audit.agentdiet.dev","brandSlug":"x402-audit-agentdiet-dev-mpp","brandBaseUrl":"https://x402-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time for a given package and returns active CVEs, GHSA advisories, and patched versions for PyPI, npm, Go, or Rust crates.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any known CVEs or GHSA security advisories right now, and tell me which versions have been patched?","exampleUseCases":[{"title":"Audit Python dependency before release","prompt":"Before I ship this build, can you scan the PyPI package 'cryptography' for any active CVEs or GHSA advisories and let me know if there are patched versions I should upgrade to?"},{"title":"Check npm package for supply chain risk","prompt":"I'm about to add lodash to our project — can you check if the npm package 'lodash' has any known vulnerabilities or security advisories on OSV right now?"},{"title":"Go module vulnerability check in CI","prompt":"Can you query OSV for any current CVEs or GHSA advisories affecting the Go module 'golang.org/x/net' and tell me what the recommended safe version is?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory IDs, vulnerability summaries, affected version ranges, and available patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty advisory list or 404-equivalent","Invalid ecosystem prefix causes validation error (e.g. missing 'PyPI:' prefix)","OSV.dev upstream timeout or unavailability results in error response","Payment failure via x402 protocol blocks the request before execution","Malformed package identifier (empty string or unsupported ecosystem) rejected by input schema validation"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from Google OSV.dev rather than a cached or static advisory database. It is ideal for CI/CD pipelines, dependency auditing agents, and security workflows that need up-to-date CVE and GHSA data for PyPI, npm, Go, or Rust crate packages. Prefer it over static NVD lookups when currency of data matters and when working with ecosystems OSV.dev specializes in.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:37:26.549Z","isFirstParty":false,"canonicalSlug":"x402-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-ed5903c2"}