{"uid":"cap_si18CQygSzpobMMJEQpPd","slug":"stack-facts-cve-search-48058ffa","name":"Stack Facts CVE Search","description":"Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.","url":"https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/cve/search?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"type":"string","const":"GET"},"queryParams":{"type":"object","properties":{"q":{"type":"string","maxLength":100,"minLength":2},"kev":{"type":"boolean"},"limit":{"type":"integer","maximum":50,"minimum":1},"package":{"type":"string","maxLength":214,"minLength":1},"severity":{"enum":["low","medium","high","critical"],"type":"string"},"ecosystem":{"type":"string","maxLength":20}},"additionalProperties":false}}},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string","const":"json"},"example":{"type":"object","required":["data","meta"],"properties":{"data":{"type":"object"},"meta":{"type":"object"}}}}}}},"responseSchema":{"type":"json","example":{"data":{"count":1,"order":"in_kev first, then cvss (highes…","query":{"q":"log4j","kev":null,"limit":20,"package":null,"severity":null,"ecosystem":null},"matched":1,"results":[{"cve":"CVE-2021-44228","cvss":null,"name":"Apache Log4j2 Remote Code Execu…","in_kev":true,"vendor":"Apache","product":"Log4j2","summary":"Remote code injection in Log4j","packages":[{}],"severity":"critical","advisories":[{}],"kev_date_added":"2021-12-10","known_ransomware":true}],"coverage":{"nvd":false,"note":"Searches CISA KEV (vendor, prod…","sources":["CISA KEV"],"osv_ecosystems":["Go"]},"truncated":false,"kev_catalog_version":"2026.10.10"},"meta":{"stale":false,"notice":"Normalised (modified) from the …","dataset":"cve_search","datasets":{"kev":{},"osv":{}},"licences":"/licences","attribution":"KEV status from the CISA Known …"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_RGyhg-erPGAs1X5tQn8im","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Search for CVEs by keyword, package, severity, or ecosystem — returning CISA KEV status, CVSS scores, OSV advisories, and ransomware association.","exampleAgentPrompt":"Before I install the log4j package in my Java project, can you check if it has any critical or exploited CVEs — especially ones in the CISA Known Exploited Vulnerabilities catalog or linked to ransomware?","exampleUseCases":[{"title":"Pre-install package security check","prompt":"I'm about to install the requests Python package — can you check if it has any known vulnerabilities, especially exploited ones in the CISA KEV list, and tell me the severity?"},{"title":"Ransomware-linked CVE triage","prompt":"Show me up to 10 critical CVEs that are known to be exploited by ransomware groups — I need to prioritize patching for our systems."},{"title":"Incident response CVE lookup","prompt":"We got an alert mentioning CVE-2021-44228 — can you pull the details on it, including whether it's in the CISA KEV catalog and what the severity and vendor are?"}],"resultDescription":"Returns a list of matching CVE records with CVE ID, severity, CVSS score, vendor, product, summary, KEV status and date added, ransomware association flag, OSV package advisories, and dataset coverage metadata. Results are ordered by KEV status first, then by CVSS score descending. Also includes query echo, match count, and attribution/license info.","failureModes":["Query string too short (under 2 characters) returns validation error","No matching CVEs found returns empty results array with count 0","Invalid severity enum value returns schema validation error","Ecosystem string exceeds 20 characters returns error","Payment not included or insufficient USDC returns HTTP 402","Limit exceeds 50 returns validation error"],"whenToPreferThis":"Choose this endpoint when an AI agent needs to assess software security risk before installation, triage vulnerabilities for patching priority, or verify whether a specific CVE is actively exploited or ransomware-linked. It is especially valuable when you need CISA KEV status alongside OSV data in a single signed, pay-per-call call with no account setup required. Prefer over free NVD APIs when you need KEV enrichment, ransomware flags, and cryptographically signed responses in an agent workflow.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-19T06:40:08.482Z","isFirstParty":false,"canonicalSlug":"stack-facts-cve-search-48058ffa"}