{"uid":"cap_cDoXwZUGBVoinm9WdqV0h","slug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-ffa4d1f3","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/epss-scanner)","url":"https://serp-extract.agentdiet.dev/v1/epss-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"limit":{"type":"integer","default":20,"maximum":100,"minimum":1,"description":"Maximum number of items to return per page (1-100)"},"cursor":{"type":"string","description":"Opaque pagination cursor for fetching the next page"},"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_a79RAB2WdJNQRoH7P73iL","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for any PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Check if the PyPI package 'requests' has any active CVEs or GHSA advisories, and tell me what the patched versions are.","exampleUseCases":[{"title":"Dependency audit before deployment","prompt":"Before we deploy, scan the npm package 'lodash' for any known CVEs or GitHub Security Advisories and tell me if there's a safe patched version I should upgrade to."},{"title":"Supply chain security check for Go module","prompt":"Can you check 'Go:golang.org/x/net' on OSV.dev and tell me if there are any active vulnerabilities or advisories I should be aware of?"},{"title":"Rust crate security review","prompt":"I'm adding 'crates.io:hyper' to my Rust project — can you scan it for any known CVEs or GHSA advisories before I commit to using it?"}],"resultDescription":"Returns a structured response containing active CVE identifiers, GHSA advisory references, affected version ranges, and recommended patched versions for the specified package, sourced live from Google OSV.dev.","failureModes":["Invalid package identifier format returns an error or empty result","Package not found in OSV.dev database returns no vulnerabilities (not necessarily safe)","Ecosystem prefix mismatch (e.g. wrong casing) may yield no results","OSV.dev API downtime causes request failure","Rate limiting or payment failure results in HTTP 402 response"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from Google OSV.dev for open-source packages across PyPI, npm, Go modules, or Rust crates. It is preferable to static or cached vulnerability databases when freshness matters, or when you need CVE and GHSA advisory details together with patched version recommendations in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:25.627Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-5ca26ef1"}