{"uid":"cap_eJrpYWwvalU0tZPkkaZft","slug":"llms-generator-agentdiet-dev-real-time-open-source-package-cve-ghsa-d4aba9ac","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://llms-generator.agentdiet.dev/v1/cve-lookup)","url":"https://llms-generator.agentdiet.dev/v1/cve-lookup?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_lWPq_ksjLQ8DA4U7Jkphs","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"llms-generator.agentdiet.dev","brandSlug":"llms-generator-agentdiet-dev-mpp","brandBaseUrl":"https://llms-generator.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for PyPI, npm, Go, or Rust packages.","exampleAgentPrompt":"Can you check if the npm package lodash has any active CVEs or GHSA advisories right now, and tell me which version I should upgrade to if it's vulnerable?","exampleUseCases":[{"title":"Dependency audit before production deploy","prompt":"Before we ship this week, can you check whether PyPI:requests and PyPI:cryptography have any active CVEs or GHSA advisories I should know about, and what the patched versions are?"},{"title":"Security review of Go module","prompt":"I'm using golang.org/x/net in our backend — can you scan it for known vulnerabilities on OSV.dev and tell me if there's a safe version I should be on?"},{"title":"Rust crate vulnerability check for CI pipeline","prompt":"Can you look up whether the Rust crate crates.io:hyper has any unpatched CVEs right now so I can decide whether to block the build?"}],"resultDescription":"Returns a list of active vulnerabilities for the specified package, including CVE and GHSA identifiers, severity information, affected version ranges, and the earliest patched version available, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty or error response","Invalid ecosystem prefix causes lookup failure (e.g. misspelled 'PyPi' instead of 'PyPI')","OSV.dev upstream unavailable — may return timeout or 503","No vulnerabilities found is a valid success response, not an error","Rate limiting or payment failure via x402 may block the request"],"whenToPreferThis":"Use this endpoint when you need real-time, live vulnerability data from Google OSV.dev for PyPI, npm, Go, or Rust (crates.io) packages. Prefer it over static NVD mirrors or cached advisory databases when you need the latest CVE and GHSA data at call time. Best for CI/CD pipelines, pre-deploy audits, or agent workflows that need to verify dependency safety on demand. It abstracts the OSV.dev API with a simple package-name query and micropayment access model.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:05.727Z","isFirstParty":false,"canonicalSlug":"llms-generator-agentdiet-dev-real-time-open-source-package-cve-ghsa-99e375d4"}