{"uid":"cap__i-Ubvr9WtChvzOHwvt98","slug":"agentsvc-io-cve-lookup-1e762e44","name":"agentsvc.io CVE Lookup","description":"86 APIs for AI agents: web scraping and crawling to Markdown, AI summaries, data extraction and cited answers, screenshots and PDF, PDF, OCR and document conversion, news, paper and developer search and more, paid per call with USDC on Base, Solana, Polygon or Arbitrum via x402. No account, no API key, free sample on every service.","url":"https://agentsvc.io/api/v1/proxy/cve-lookup?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"limit":{"type":"integer","default":20,"maximum":50,"minimum":1},"cve_id":{"type":"string","description":"CVE-2021-44228 or GHSA-xxxx-xxxx-xxxx"},"package":{"type":"string"},"version":{"type":"string"},"ecosystem":{"type":"string","description":"OSV ecosystem name, case sensitive: npm, PyPI, Maven, Go, crates.io, RubyGems, NuGet, Packagist"}}},"responseSchema":{"type":"json","example":{"data":{"count":6,"query":{"package":"lodash","version":"4.17.15","ecosystem":"npm"},"source":"OSV.dev","checked_at":"2026-10-06T14:30:56.665Z","vulnerable":true,"vulnerabilities":[{"id":"GHSA-29mw-wpgm-hmr9","cwe":["CWE-1333","CWE-400"],"url":"https://osv.dev/vulnerability/GHSA-29mw-wpgm-hmr9","aliases":["CVE-2020-28500"],"summary":"Regular Expression Denial of Service (ReDoS) in lodash","affected":[{"ranges":[{"fixed":"4.17.21","introduced":"4.0.0","last_affected":null}],"package":"lodash","ecosystem":"npm"},{"ranges":[{"fixed":"4.17.21","introduced":"4.0.0","last_affected":null}],"package":"lodash-es","ecosystem":"npm"}],"severity":"MODERATE","published":"2022-01-06","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-28500","https://github.com/github/advisory-database/pull/6139"],"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}]},"success":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.009","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.009/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_EnMMjOOdrEgZPuSDs1Qsz","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.009","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up known vulnerabilities for a software package, version, or CVE/GHSA identifier via OSV.dev","exampleAgentPrompt":"Check if lodash version 4.17.15 on npm has any known vulnerabilities — give me a list of CVEs, their severity, and what version fixes them.","exampleUseCases":[{"title":"Audit dependency before shipping","prompt":"Before we deploy, check if requests version 2.25.0 in the PyPI ecosystem has any known CVEs or GHSA advisories and tell me the severity of each."},{"title":"Investigate Log4Shell exposure","prompt":"Look up CVE-2021-44228 (Log4Shell) and give me the details — what packages are affected, which versions are vulnerable, and what the fix version is."},{"title":"Scan Go module for security issues","prompt":"Does the Go package golang.org/x/crypto at version 0.0.0-20200622213623-75b288015ac9 have any known vulnerabilities in the Go ecosystem?"}],"resultDescription":"Returns a JSON object containing a vulnerability flag (vulnerable: true/false), count of findings, and an array of vulnerability records from OSV.dev. Each record includes the GHSA/CVE ID, summary, severity, CVSS vector, CWE IDs, affected package and version ranges (introduced/fixed), published date, and reference URLs.","failureModes":["Unknown or malformed CVE/GHSA ID returns empty results or error","Ecosystem name is case-sensitive — incorrect casing (e.g. 'pypi' instead of 'PyPI') may return no results","Package not found in specified ecosystem returns empty vulnerability list","Version string format mismatch may cause incorrect range matching","Payment failure or insufficient USDC balance returns 402 error"],"whenToPreferThis":"Use this endpoint when you need real-time vulnerability data from the OSV.dev database for a specific package, version, or CVE/GHSA identifier. Prefer it over static NVD lookups when you need structured affected-version ranges and fix versions in a single call. Ideal for agents performing automated dependency audits, CI security checks, or investigating a specific advisory without needing an account or API key.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-10T12:42:10.359Z","isFirstParty":false,"canonicalSlug":"agentsvc-io-cve-lookup-1e762e44"}