{"uid":"cap_hz8X3kQdZ-b-InX9OgnW6","slug":"sec-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-fc4fae68","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://sec-intel.agentdiet.dev/v1/vuln-scanner)","url":"https://sec-intel.agentdiet.dev/v1/vuln-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_n9TcLXndTwdTlzM54U_dJ","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"sec-intel.agentdiet.dev","brandSlug":"sec-intel-agentdiet-dev-mpp","brandBaseUrl":"https://sec-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for PyPI, npm, Go, or Rust crate packages.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me what the patched version is?","exampleUseCases":[{"title":"Audit Python dependency before deployment","prompt":"Before I deploy, check if PyPI:cryptography has any known CVEs or GHSA advisories and what version I should upgrade to."},{"title":"CI pipeline npm vulnerability gate","prompt":"Scan npm:lodash for any active security vulnerabilities or advisories so I can decide whether to block this build."},{"title":"Rust crate security review","prompt":"I'm adding crates.io:hyper to my project — does it have any outstanding CVEs or GHSA advisories I should know about?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory details, affected version ranges, severity information, and recommended patched versions for the queried open-source package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty vulnerability list or 404-style response","Invalid ecosystem prefix causes lookup failure (e.g. typo in 'PyPI:' prefix)","Package with no known vulnerabilities returns empty advisory list, which may be misinterpreted as an error","OSV.dev upstream unavailability causes timeout or 503 response","Malformed package identifier (missing ecosystem or name) triggers validation error"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability intelligence from OSV.dev for open-source packages across PyPI, npm, Go modules, or Rust crates. It is preferable to static CVE databases when you need up-to-date GHSA advisories and patched version recommendations as part of an automated security audit, CI/CD gate, or dependency review workflow.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:48:10.321Z","isFirstParty":false,"canonicalSlug":"sec-intel-agentdiet-dev-real-time-open-source-package-cve-ghsa-21cfcabe"}