{"uid":"cap__yMKe-QexFgMOgkS4cvFT","slug":"cve-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-8079bc7d","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://cve-intel.agentdiet.dev/a2a)","url":"https://cve-intel.agentdiet.dev/a2a?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.010000","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.010000/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.010000","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.010000","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_EgHKt1mqaupHMZeYaFi-y","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.010000","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":"cve-intel.agentdiet.dev","brandSlug":"cve-intel-agentdiet-dev-mpp","brandBaseUrl":"https://cve-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev live vulnerability data for a named package and returns active CVEs, GHSA advisories, and patched version information.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me what patched version I should upgrade to?","exampleUseCases":[{"title":"Dependency audit before deployment","prompt":"Before I push this release, can you scan the npm package lodash for any known CVEs or GitHub security advisories and tell me if there's a safe version I should be using?"},{"title":"Supply chain risk check for a Go module","prompt":"I'm adding golang.org/x/net as a dependency — can you check if it has any active vulnerabilities in OSV.dev right now?"},{"title":"Rust crate security review","prompt":"Can you look up the crates.io package 'hyper' and tell me if there are any unpatched CVEs or GHSA advisories I should be worried about?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory IDs, severity information, affected version ranges, and recommended patched versions for the queried open-source package, sourced live from Google OSV.dev.","failureModes":["Unknown or misspelled package name returns empty results or error","Unsupported ecosystem identifier causes validation failure","OSV.dev upstream service unavailability results in timeout or 5xx error","Package with no known vulnerabilities returns empty advisories list","Malformed ecosystem:name format may cause parse error"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from Google OSV.dev for PyPI, npm, Go modules, or Rust crates — especially when you need CVE and GHSA advisories with patched version guidance in a single call, without maintaining your own vulnerability database. Prefer this over static SBOMs or local scanners when freshness and coverage of the OSV ecosystem matter.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:34:27.391Z","isFirstParty":false,"canonicalSlug":"cve-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-46a5ff78"}