{"uid":"cap_ZL0O9iKyU4GkKUoy3dsS5","slug":"workflows-agentdiet-dev-real-time-open-source-package-cve-ghsa-be2f477d","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://workflows.agentdiet.dev/v1/epss-scanner)","url":"https://workflows.agentdiet.dev/v1/epss-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_kIjRNTTBFr0-2lc_AEqva","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"workflows.agentdiet.dev","brandSlug":"workflows-agentdiet-dev-mpp","brandBaseUrl":"https://workflows.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories, and tell me which versions have patches?","exampleUseCases":[{"title":"Pre-deployment dependency security audit","prompt":"Before I deploy this Python app, can you scan 'PyPI:cryptography' for any known CVEs or GHSA advisories and tell me if there's a patched version I should upgrade to?"},{"title":"Node.js package vulnerability check","prompt":"I'm using lodash in my project — can you check 'npm:lodash' on OSV.dev for any active security vulnerabilities and what versions fix them?"},{"title":"Rust crate supply chain vetting","prompt":"I'm evaluating the 'crates.io:hyper' crate for a new service — does it have any open CVEs or security advisories I should know about?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory references, affected version ranges, severity information, and recommended patched versions for the queried open-source package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev database — returns empty or null vulnerability list","Invalid ecosystem prefix causes lookup failure or misrouted query","Package with no recorded vulnerabilities returns empty advisories list","OSV.dev upstream API timeout or unavailability causes request failure","Malformed package identifier format (missing ecosystem prefix) may return incorrect results"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability intelligence from Google OSV.dev for PyPI, npm, Go, or Rust crate packages — especially when you need CVE and GHSA advisory data with patched version recommendations in a single call. Prefer this over static NVD lookups or local databases when freshness matters, or when working with multiple open-source ecosystems in a unified interface.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:39.528Z","isFirstParty":false,"canonicalSlug":"workflows-agentdiet-dev-real-time-open-source-package-cve-ghsa-41a19826"}