{"uid":"cap_hRJQ5WC_ORBnFKZKaLqzv","slug":"sec-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-4fcbebbc","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://sec-intel.agentdiet.dev/v1/cargo-vuln-scan)","url":"https://sec-intel.agentdiet.dev/v1/cargo-vuln-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_EieVshpiliFo_mzvct9uO","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"sec-intel.agentdiet.dev","brandSlug":"sec-intel-agentdiet-dev-mpp","brandBaseUrl":"https://sec-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries live Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for PyPI, npm, Go, or Rust crate packages.","exampleAgentPrompt":"Check if the PyPI package 'requests' has any active CVEs or GHSA advisories right now, and tell me what versions are patched.","exampleUseCases":[{"title":"Audit Python dependency before deployment","prompt":"Before I deploy this app, can you scan PyPI:cryptography for any known CVEs or GHSA vulnerabilities and tell me if there's a safe patched version I should upgrade to?"},{"title":"Check npm package in CI pipeline","prompt":"Scan npm:lodash for active security advisories — I want to know if there are any unpatched CVEs before merging this pull request."},{"title":"Rust crate vulnerability review","prompt":"I'm using the hyper crate in my Rust project — can you check crates.io:hyper for any live CVEs or security advisories and what the fixed version is?"}],"resultDescription":"Returns a structured list of active vulnerabilities for the queried package including CVE IDs, GHSA advisory IDs, severity ratings, affected version ranges, and recommended patched versions sourced live from Google OSV.dev.","failureModes":["Invalid or unrecognized package identifier returns empty or error response","Ecosystem prefix mismatch (e.g. wrong ecosystem label) may yield no results","OSV.dev upstream unavailability could cause timeout or 502 errors","Package name typos return no vulnerability data without warning","Packages with no known vulnerabilities return an empty advisory list which may be misread as an error"],"whenToPreferThis":"Choose this endpoint when you need real-time, authoritative CVE and GHSA vulnerability data for a specific open-source package across PyPI, npm, Go modules, or Rust crates — especially when you need live data from Google OSV.dev rather than a cached or static NVD snapshot. Ideal for CI/CD pipeline security checks, dependency auditing before deployment, or agent-driven supply-chain risk assessments.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:20:54.205Z","isFirstParty":false,"canonicalSlug":"sec-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-21cfcabe"}