{"uid":"cap_cLYbUUvCFjqUCRO555cdf","slug":"broker-epss-scanner-real-time-open-source-package-cve-ghsa-5d5c4279","name":"broker-epss-scanner: Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://x402broker.com/v1/epss-scanner)","url":"https://x402broker.com/v1/epss-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"unknown","protocol":"x402","network":"base","amountUsd":null,"per":"call","confidence":"unknown"},{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_1DRxaYJi41cMKHPeyk-OU","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null},{"uid":"pm_VVlexgK0pS9_J7m7puaFP","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real-time to return active CVEs, GHSA advisories, and patched versions for any PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the npm package 'lodash' has any known CVEs or GHSA security advisories right now, and tell me what the patched version is?","exampleUseCases":[{"title":"Python dependency security audit","prompt":"Check if the PyPI package 'requests' version 2.27.0 has any active CVEs or GHSA advisories, and tell me what version I should upgrade to."},{"title":"CI pipeline vulnerability gate","prompt":"Before we ship, scan the npm package 'axios' for any known security vulnerabilities on OSV.dev and flag if there are unpatched CVEs."},{"title":"Rust crate security review","prompt":"I'm adding the Rust crate 'serde' to our project — can you check it against the OSV vulnerability database to see if there are any active security advisories or CVEs I should know about?"}],"resultDescription":"Returns a structured response containing active CVE identifiers, GHSA advisory references, affected version ranges, and recommended patched versions for the queried open-source package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev returns empty or 404 response","Unsupported ecosystem (outside PyPI, npm, Go, Rust) may return no results","OSV.dev upstream unavailability causes timeout or 503","Missing required 'package' query parameter returns validation error","Ambiguous package name may return advisories for wrong package"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data for open-source packages across PyPI, npm, Go, or Rust ecosystems sourced from the authoritative Google OSV.dev database. Prefer it over static NVD or Snyk lookups when you need the latest GHSA advisories and patched version recommendations without maintaining your own vulnerability database.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T15:01:30.741Z","isFirstParty":false,"canonicalSlug":"broker-epss-scanner-real-time-open-source-package-cve-ghsa-5d5c4279"}