{"uid":"cap_u_drLI0pCjIABIJeyXPQN","slug":"github-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-3fe27201","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/zero-day-advisories)","url":"https://github-audit.agentdiet.dev/v1/zero-day-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_6HGB3gkPNKj29tXLt8Fhk","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"github-audit.agentdiet.dev","brandSlug":"github-audit-agentdiet-dev-mpp","brandBaseUrl":"https://github-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev for live CVE and GHSA vulnerability advisories affecting a named PyPI, npm, Go, or Rust crate package, returning active vulnerabilities and patched versions.","exampleAgentPrompt":"Check OSV.dev for any active CVEs or GHSA advisories affecting the npm package lodash — I want to know if it's safe to use and what versions have patches.","exampleUseCases":[{"title":"Audit Python dependency before deployment","prompt":"Can you check if the PyPI package requests has any known CVEs or GHSA security advisories I should know about before I deploy my app?"},{"title":"Verify Go module safety for CI pipeline","prompt":"Look up golang.org/x/net on OSV.dev and tell me if there are any open vulnerabilities or if we need to upgrade to a patched version."},{"title":"Rust crate security review","prompt":"Scan the crates.io package hyper for any active CVEs or vulnerability advisories — I want to see if our current dependency is flagged before we ship."}],"resultDescription":"Returns a structured list of active vulnerability records for the queried package from OSV.dev, including CVE IDs, GHSA advisory identifiers, vulnerability descriptions, severity indicators, affected version ranges, and the earliest patched versions available.","failureModes":["Package not found in OSV.dev — returns empty advisory list or 404-style response","Invalid ecosystem prefix causes parsing error — returns validation error","OSV.dev upstream unavailable — returns 503 or timeout","Malformed package identifier format — returns 400 bad request","Package exists but has no known vulnerabilities — returns empty results (not an error)"],"whenToPreferThis":"Choose this endpoint when you need live, authoritative vulnerability data from Google OSV.dev for open-source packages across PyPI, npm, Go modules, or Rust crates. It is ideal for CI/CD security gates, dependency audits, or agent workflows that need real-time CVE and GHSA advisory lookups rather than cached or periodic scan results. Prefer it over generic security databases when you need ecosystem-specific coverage and patched-version guidance in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:02.410Z","isFirstParty":false,"canonicalSlug":"github-audit-agentdiet-dev-real-time-open-source-package-cve-ghsa-efe6e5d6"}