{"uid":"cap_xbS5-7ZW6orhMyO4QNoB1","slug":"mcp-security-agentdiet-dev-real-time-open-source-package-cve-ghsa-f2a20d19","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-security.agentdiet.dev/v1/zero-day-advisories)","url":"https://mcp-security.agentdiet.dev/v1/zero-day-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_O9_3mlV0IhhaSwexmRAwa","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mcp-security.agentdiet.dev","brandSlug":"mcp-security-agentdiet-dev-mpp","brandBaseUrl":"https://mcp-security.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev to return active CVEs, GHSA advisories, and patched versions for a given PyPI, npm, Go, or Rust crate package.","exampleAgentPrompt":"Can you check if the npm package lodash has any active CVEs or GHSA security advisories right now, and tell me what the patched version is?","exampleUseCases":[{"title":"Auditing Python dependency before deployment","prompt":"Check whether the PyPI package 'requests' has any known CVEs or GHSA vulnerabilities I should be aware of before I ship this build."},{"title":"Scanning Go module for supply chain risk","prompt":"Look up any active security advisories for the Go module golang.org/x/net — I need to know if there are open vulnerabilities and whether a patched version exists."},{"title":"Checking Rust crate in CI pipeline","prompt":"Can you scan the Rust crate 'hyper' on crates.io for any current CVEs or GHSA advisories and tell me the safe version to upgrade to?"}],"resultDescription":"Returns a structured response containing active CVE identifiers, GHSA advisory references, affected version ranges, severity information, and available patched versions for the queried package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev — returns empty or no-vulnerability result for unknown package names","Malformed package identifier (missing ecosystem prefix) may return incorrect or no results","OSV.dev upstream unavailability could cause timeout or error responses","Ecosystem not supported (e.g. Java Maven, Ruby gems) may yield no results","Payment failure via x402 returns HTTP 402 before query is executed"],"whenToPreferThis":"Choose this endpoint when you need live, authoritative CVE and GHSA vulnerability data for open-source packages across PyPI, npm, Go, or Rust ecosystems specifically sourced from Google OSV.dev. Prefer it over static advisory databases when you need real-time patched version information and zero-day coverage without maintaining your own vulnerability feed.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:26:21.082Z","isFirstParty":false,"canonicalSlug":"mcp-security-agentdiet-dev-real-time-open-source-package-cve-ghsa-398bd891"}