{"uid":"cap_gVqxIXbaQpTqko2CzhlBE","slug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-a733c801","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/cve-intel)","url":"https://serp-extract.agentdiet.dev/v1/cve-intel?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_fDl_zFIIxQbVdR5QgTaLK","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for any PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA advisories right now, and tell me what patched versions are available?","exampleUseCases":[{"title":"Dependency audit before production deploy","prompt":"Before we ship this release, can you check if 'PyPI:Pillow' has any known CVEs or security advisories and tell me the earliest safe version to use?"},{"title":"Screening npm package in code review","prompt":"We're adding lodash to our project — can you pull up any active vulnerabilities or GHSA advisories for 'npm:lodash' so we know if it's safe?"},{"title":"Rust crate security vetting","prompt":"I'm about to use the hyper crate in a Rust service — check 'crates.io:hyper' for any open CVEs or advisories and let me know if there's a patched version I should upgrade to."}],"resultDescription":"Returns a structured object listing all active CVEs and GHSA advisories for the queried package, including severity ratings, affected version ranges, and recommended patched versions sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty advisory list or error indicating unknown package","Invalid ecosystem prefix — malformed 'Ecosystem:name' input returns a validation error","No vulnerabilities found — clean packages return an empty result set (not an error)","OSV.dev upstream timeout — live dependency means transient failures possible","Payment failure — x402 micropayment not completed results in 402 response"],"whenToPreferThis":"Choose this endpoint when you need real-time, live CVE and GHSA data sourced directly from Google OSV.dev for PyPI, npm, Go modules, or Rust crates. It is preferred over static NVD lookups or bundled SBOM scanners when you need up-to-the-minute advisory coverage and patched version guidance without running a local scanner. Especially useful in CI/CD pipelines, agent-driven dependency audits, or security triage workflows where freshness of vulnerability data matters.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:34:14.586Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-5ca26ef1"}