{"uid":"cap_i0FiFrvxFDnv_M_oIcuT-","slug":"stack-facts-cve-lookup-ff4e3dbf","name":"Stack Facts CVE Lookup","description":"Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.","url":"https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/cve/%7Bid%7D?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","properties":{"properties":{"type":"string"}}},"responseSchema":{"type":"json","example":{"data":{"cve":"CVE-2021-44228","kev":{"cve":"CVE-2021-44228","name":"Apache Log4j2 Remote Code Execu…","in_kev":true,"vendor":"Apache","product":"Log4j2","due_date":"2021-12-24","date_added":"2021-12-10","notes_urls":["https://nvd.nist.gov/vuln/detai…"],"required_action":"For all affected software asset…","known_ransomware":true},"cvss":null,"in_kev":true,"priority":"critical","advisories":[{"id":"GHSA-jfh8-c2jp-5v3q","kind":"vuln","aliases":["CVE-2021-44228"],"sources":[{}],"summary":"Remote code injection in Log4j","affected":[{}],"modified":"2025-10-22T19:37:02Z","severity":[],"ecosystem":"Maven","published":"2021-12-10T00:40:56Z","severity_label":"CRITICAL"}],"priority_rule":"critical: in CISA KEV; null: no…","advisory_count":1,"priority_basis":"kev","kev_catalog_version":"2026.10.10"},"meta":{"stale":false,"notice":"Normalised (modified) from the …","dataset":"cve","datasets":{"kev":{},"osv":{}},"licences":"/licences","attribution":"KEV status from the CISA Known …"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_cunSIZICdHN9h5mAsSr-b","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns full vulnerability details for a CVE ID, including CISA KEV status, OSV advisories, exploitability, and known ransomware association, with a cryptographically signed response.","exampleAgentPrompt":"Can you pull up the full vulnerability details for CVE-2021-44228 — specifically whether it's in the CISA Known Exploited Vulnerabilities list, if it's linked to ransomware, and which package versions fix it?","exampleUseCases":[{"title":"Pre-install security check for a dependency","prompt":"Before I install log4j in our project, check CVE-2021-44228 — is it on the CISA KEV list, is there a fix version available, and has it been used in ransomware attacks?"},{"title":"Validating patch urgency for a reported CVE","prompt":"Our security team flagged CVE-2023-44487 — can you tell me if CISA has added it to the Known Exploited Vulnerabilities catalog, what the required action is, and what the remediation deadline is?"},{"title":"Threat intel enrichment for a CVE in an alert","prompt":"I just got a SIEM alert referencing CVE-2022-26134. Pull up everything on it — KEV status, OSV advisories, severity label, affected packages, and whether ransomware groups have used it."}],"resultDescription":"Returns a JSON object with the CVE ID, full CISA KEV entry (vendor, product, required action, due date, ransomware flag), OSV advisory list (GHSA IDs, affected packages, fix versions, severity label, publish date), advisory count, dataset freshness metadata, and a cryptographic signature verifying the data integrity.","failureModes":["CVE ID not found in either KEV or OSV — returns empty advisories array with advisory_count 0","Malformed CVE ID format — may return 4xx error","Dataset temporarily stale — meta.stale flag set to true with stale_at timestamp","Payment not included or insufficient — 402 Payment Required response before data is returned","Network or server error — 5xx response"],"whenToPreferThis":"Choose this endpoint when you need authoritative, signed vulnerability data for a specific CVE, particularly when you need to cross-reference CISA KEV exploitation status alongside OSV advisory details in a single call. It is ideal for AI agents performing automated security triage, dependency audits, or threat enrichment pipelines that require tamper-evident, pay-per-use data without managing API keys or accounts. Prefer over raw CISA or OSV APIs when you need a unified, pre-normalized response with provenance metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T12:42:26.477Z","isFirstParty":false,"canonicalSlug":"stack-facts-cve-lookup-ff4e3dbf"}