{"uid":"cap_tE9LbJI1z5piHnF3bLLlE","slug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-fb5a45f0","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/cargo-vuln-scan)","url":"https://serp-extract.agentdiet.dev/v1/cargo-vuln-scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_bh3AzOZUL74yFK1HwHgxr","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real-time to return active CVEs, GHSA advisories, and patched versions for PyPI, npm, Go, or Rust (crates.io) packages.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories right now, and tell me what versions have patches?","exampleUseCases":[{"title":"Audit Python dependency before deployment","prompt":"Before I deploy this app, can you scan the PyPI package 'cryptography' for any known CVEs or GHSA advisories and tell me if there's a patched version I should upgrade to?"},{"title":"Check npm library for active exploits","prompt":"I'm about to add lodash to our project — can you check if npm:lodash has any active security vulnerabilities or advisories on OSV.dev right now?"},{"title":"Rust crate security review","prompt":"We're using hyper in our Rust service — can you look up crates.io:hyper on OSV.dev and report any CVEs or GHSA advisories along with which versions are safe?"}],"resultDescription":"A structured object containing any active CVEs and GHSA advisory identifiers for the queried package, affected version ranges, severity information, and the patched/fixed versions available, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty advisory list or 404-style response","Invalid ecosystem prefix causes parsing error or unrecognized package","OSV.dev upstream timeout or unavailability causes delayed or failed response","Malformed package identifier (missing colon separator) results in validation error","Package has no known vulnerabilities — returns empty results, which may be confused with an error"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability intelligence from OSV.dev for open-source packages across PyPI, npm, Go modules, or Rust crates — especially when you want both CVE and GHSA advisory coverage in a single call without scraping OSV.dev directly. Prefer this over static NVD feeds when freshness matters or when scanning Rust/Go ecosystems that NVD may cover incompletely.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:34:07.036Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-5ca26ef1"}