{"uid":"cap_o4WKp3BaRjEEandFYCADd","slug":"x402broker-com-real-time-open-source-package-cve-ghsa-vulnerability-c7ccee37","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://x402broker.com/v1/cve)","url":"https://x402broker.com/v1/cve?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_F8i0sKfgX8BMDUlb-hcp0","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"x402broker.com","brandSlug":"x402broker-com-mpp","brandBaseUrl":"https://x402broker.com","brandDocsUrl":null,"whatItDoes":"Queries live Google OSV.dev intelligence to return active CVEs, GHSA advisories, and patched versions for PyPI, npm, Go, or Rust crate packages.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA advisories, and tell me which version fixes them?","exampleUseCases":[{"title":"Audit Python dependency before release","prompt":"Before I ship this release, can you scan PyPI:cryptography for any known CVEs or GHSA advisories and tell me the patched version I should upgrade to?"},{"title":"Check npm package for active exploits","prompt":"Does npm:lodash have any active security vulnerabilities right now? I need the CVE IDs and the version that patches them."},{"title":"Rust crate supply chain security check","prompt":"I'm about to add crates.io:hyper as a dependency — can you check it against OSV.dev for any open CVEs or security advisories?"}],"resultDescription":"Returns a structured list of active vulnerability records for the queried package, including CVE IDs, GHSA advisory identifiers, affected version ranges, severity information, and the minimum patched version available, sourced live from Google's OSV.dev database.","failureModes":["Unknown or misspelled package name returns empty or error response","Unsupported ecosystem prefix causes query failure","OSV.dev upstream API downtime results in timeout or 502","Missing 'package' parameter returns 400 validation error","Rate limiting or payment failure returns 402 response"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data from Google OSV.dev for open-source packages across PyPI, npm, Go modules, or Rust crates. It is ideal for automated dependency auditing, pre-release security checks, and CI/CD pipeline integration where up-to-date CVE and GHSA data is critical. Prefer it over static NVD lookups when you need ecosystem-specific patched version information.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:14.928Z","isFirstParty":false,"canonicalSlug":"x402broker-com-real-time-open-source-package-cve-ghsa-vulnerability-c7ccee37"}