{"uid":"cap_jZzvW344uEgLvv5PRLvcq","slug":"x402-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-30bf754c","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://x402-audit.agentdiet.dev/v1/osv-cve-vulnerability-radar)","url":"https://x402-audit.agentdiet.dev/v1/osv-cve-vulnerability-radar?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_gg2ONDgMQzjQORpKO3br-","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"x402-audit.agentdiet.dev","brandSlug":"x402-audit-agentdiet-dev-mpp","brandBaseUrl":"https://x402-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for any PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me which versions are patched?","exampleUseCases":[{"title":"Dependency security audit before deploy","prompt":"Before I push this release, check if any of my key dependencies are vulnerable — start with npm:lodash and tell me if there are any active CVEs and what version I should upgrade to."},{"title":"Rust crate vulnerability check","prompt":"I'm adding crates.io:hyper to my Rust project — can you scan it for any known security vulnerabilities or GHSA advisories before I add it to my Cargo.toml?"},{"title":"Go module CVE investigation","prompt":"One of our Go dependencies is golang.org/x/net — can you pull up its current CVE status from OSV.dev and let me know if there's anything critical we need to patch?"}],"resultDescription":"Returns a structured JSON object containing active CVEs, GHSA advisory IDs, affected version ranges, severity ratings, and recommended patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Package not found in any supported ecosystem returns empty vulnerability list","Malformed package identifier (missing ecosystem prefix) may yield incorrect or no results","OSV.dev upstream unavailability causes request failure","Rate limiting or payment failure (x402) blocks the request","Ambiguous package name without ecosystem prefix may match wrong package"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from Google OSV.dev for a specific open-source package across PyPI, npm, Go, or Rust crate ecosystems — especially when you need CVE IDs, GHSA advisories, and patched version recommendations in a single call. Prefer this over static databases when freshness matters for CI/CD pipelines, dependency audits, or pre-deployment security checks.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:38.229Z","isFirstParty":false,"canonicalSlug":"x402-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-ed5903c2"}