{"uid":"cap_vWzq0aVm1SzIn7CO8DE3x","slug":"email-verify-agentdiet-dev-real-time-open-source-package-cve-ghsa-6c81d3f3","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://email-verify.agentdiet.dev/v1/cve-lookup)","url":"https://email-verify.agentdiet.dev/v1/cve-lookup?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.015","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.015/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.015","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_B7DsQaAZzYRnuaD-oyn40","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.015","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"email-verify.agentdiet.dev","brandSlug":"email-verify-agentdiet-dev-mpp","brandBaseUrl":"https://email-verify.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust package.","exampleAgentPrompt":"Can you check if the Python requests package has any active CVEs or GHSA advisories right now, and tell me which version I should upgrade to?","exampleUseCases":[{"title":"Pre-deployment dependency security audit","prompt":"Before I deploy, can you check whether numpy on PyPI has any known vulnerabilities or security advisories I should be aware of?"},{"title":"Rust crate security review","prompt":"I'm about to add the hyper Rust crate to my project — can you pull up any active CVEs or GHSA advisories for crates.io:hyper and tell me the patched version?"},{"title":"CI pipeline npm package check","prompt":"Can you look up whether npm:lodash has any live CVEs or vulnerability advisories so I can decide whether to block this build?"}],"resultDescription":"Returns a structured vulnerability report including active CVE identifiers, GHSA advisory IDs, severity details, affected version ranges, and recommended patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty or not-found response","Malformed package identifier (missing ecosystem prefix) — may return error or mismatched results","No known vulnerabilities — returns empty advisories list (not an error)","OSV.dev upstream unavailable — may return timeout or 5xx error","Unsupported ecosystem specified — returns error or no results"],"whenToPreferThis":"Choose this endpoint when you need real-time, live vulnerability data sourced directly from Google OSV.dev for PyPI, npm, Go, or Rust packages, and require CVE and GHSA advisory details with patched version recommendations. Prefer it over static advisory databases when currency of data matters, or when integrating security checks into agent workflows that need structured, machine-readable vulnerability intelligence on a per-package basis.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:57.906Z","isFirstParty":false,"canonicalSlug":"email-verify-agentdiet-dev-real-time-open-source-package-cve-ghsa-202bd7ef"}