{"uid":"cap_hndW_Bon3U6UyB1tyikrK","slug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-703d8ed8","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/go-module-cve)","url":"https://serp-extract.agentdiet.dev/v1/go-module-cve?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"limit":{"type":"integer","default":20,"maximum":100,"minimum":1,"description":"Maximum number of items to return per page (1-100)"},"cursor":{"type":"string","description":"Opaque pagination cursor for fetching the next page"},"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_m7-RBRzLCegL2xcJ1mJSW","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for PyPI, npm, Go, or Rust crate packages.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me which versions are patched?","exampleUseCases":[{"title":"CI pipeline dependency security gate","prompt":"Before we merge this PR, check whether the npm package 'lodash' has any active CVEs or GHSA advisories and let me know the first patched version I should upgrade to."},{"title":"Rust crate audit before production deploy","prompt":"We're shipping tomorrow — can you scan the Rust crate 'hyper' on crates.io for any open vulnerabilities or security advisories so I know if we need to pin a safer version?"},{"title":"Go module supply chain review","prompt":"I need to vet our dependency on 'golang.org/x/net' — pull up any current CVEs or GHSA advisories for that Go module and tell me which fixed versions are available."}],"resultDescription":"Returns a structured list of active CVEs and GHSA advisories for the queried package, including vulnerability identifiers, severity ratings, affected version ranges, and the earliest patched versions available according to Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty advisory list or 404-style response","Invalid ecosystem prefix causes query failure — must match supported ecosystems (PyPI, npm, Go, crates.io)","OSV.dev upstream API downtime results in error or timeout","Ambiguous package name without ecosystem prefix may return incorrect or no results","Rate limiting or payment failure at HTTP 402 layer blocks the request"],"whenToPreferThis":"Choose this endpoint when you need real-time, authoritative CVE and GHSA vulnerability data for a specific open-source package across PyPI, npm, Go, or Rust ecosystems — especially when you want live data sourced directly from Google OSV.dev rather than a cached or third-party vulnerability database. It is ideal for CI/CD security gates, dependency audits, and pre-deployment supply chain checks where freshness of vulnerability intelligence is critical.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:31.052Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-5ca26ef1"}