{"uid":"cap_gdDOFPXh9FpJ7VXJzMTDn","slug":"mesh-agentdiet-dev-real-time-open-source-package-cve-ghsa-76280195","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://mesh.agentdiet.dev/v1/zero-day-advisories)","url":"https://mesh.agentdiet.dev/v1/zero-day-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_zvgUbe_ZA8vRnGlybC8zW","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mesh.agentdiet.dev","brandSlug":"mesh-agentdiet-dev-mpp","brandBaseUrl":"https://mesh.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for any PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the npm package lodash has any known CVEs or GHSA security advisories right now, and tell me which version patches them?","exampleUseCases":[{"title":"Audit Python dependency before release","prompt":"Before I ship this update, can you scan the PyPI package 'requests' for any active CVEs or GHSA advisories and tell me what patched version I should upgrade to?"},{"title":"Check Go module for zero-day vulnerabilities","prompt":"Does the Go module golang.org/x/net have any known security vulnerabilities or open CVEs right now? I want to know if my services are at risk."},{"title":"Rust crate security check in CI pipeline","prompt":"Can you look up the crates.io package 'hyper' on OSV.dev and tell me if there are any unpatched CVEs or security advisories I should be aware of before merging this PR?"}],"resultDescription":"Returns a structured object containing active CVE IDs, GHSA advisory identifiers, affected version ranges, severity levels, and the earliest patched version available for the queried package ecosystem and name, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty advisory list or 404-equivalent","Malformed package identifier format (missing ecosystem prefix) — returns validation error","Unsupported ecosystem requested (e.g. Maven, NuGet) — no results or error","OSV.dev upstream timeout or unavailability — request may fail or return stale data","Network/payment failure — HTTP 402 if payment not processed"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability intelligence from Google OSV.dev for PyPI, npm, Go, or Rust packages specifically — especially when you want both CVEs and GHSA advisories with patched version recommendations in a single call, without maintaining your own vulnerability database.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:24:19.323Z","isFirstParty":false,"canonicalSlug":"mesh-agentdiet-dev-real-time-open-source-package-cve-ghsa-30872358"}