{"uid":"cap_esgkwDmE3B5acmgrwVOLg","slug":"json-repair-agentdiet-dev-real-time-open-source-package-cve-ghsa-0c9df53b","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://json-repair.agentdiet.dev/v1/maven-vuln-scanner)","url":"https://json-repair.agentdiet.dev/v1/maven-vuln-scanner?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_a2hA5tnWL5FnhzYvl7aL4","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"json-repair.agentdiet.dev","brandSlug":"json-repair-agentdiet-dev-mpp","brandBaseUrl":"https://json-repair.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories, and tell me which versions have patches available?","exampleUseCases":[{"title":"Audit Python dependency before release","prompt":"Before I ship this release, check if PyPI:cryptography has any known CVEs or GHSA advisories — and if there's a patched version I should upgrade to."},{"title":"Scan npm package for vulnerabilities","prompt":"Does npm:lodash have any active security vulnerabilities or GitHub security advisories I should know about?"},{"title":"Check Rust crate security before adoption","prompt":"I'm considering using crates.io:hyper in a new project — can you scan it against OSV.dev and tell me if there are any open CVEs or patched versions I need to be aware of?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory IDs, affected version ranges, severity ratings, and recommended patched versions for the queried package from the live OSV.dev database.","failureModes":["Unknown or misspelled package name returns empty vulnerability list or error","Unsupported ecosystem prefix causes validation failure","Network timeout from OSV.dev upstream returns a service unavailable error","Malformed package identifier (missing ecosystem prefix for ambiguous packages) may return unexpected results","Rate limiting or payment failure at x402 layer returns 402 Payment Required"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from the authoritative Google OSV.dev database for PyPI, npm, Go modules, or Rust crates. Prefer it over static SBOM scanners or cached advisory databases when you need up-to-date CVE and GHSA data at the per-package level without running a full dependency graph analysis locally.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-28T00:33:23.242Z","isFirstParty":false,"canonicalSlug":"json-repair-agentdiet-dev-real-time-open-source-package-cve-ghsa-54d3a025"}