{"uid":"cap_xw1gAzYaiSd7tDGrdQbIq","slug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-1daa4b2d","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://serp-extract.agentdiet.dev/v1/go-module-cve)","url":"https://serp-extract.agentdiet.dev/v1/go-module-cve?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_uL4Dl5cOwfMB71tQSHc0J","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"serp-extract.agentdiet.dev","brandSlug":"serp-extract-agentdiet-dev-mpp","brandBaseUrl":"https://serp-extract.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev live vulnerability data for a named open-source package (PyPI, npm, Go, Rust) and returns active CVEs, GHSA advisories, and patched versions.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA security advisories, and tell me which versions have patches available?","exampleUseCases":[{"title":"Audit Python dependency before deployment","prompt":"Before we deploy, can you scan the PyPI package 'Pillow' for any known CVEs or GHSA advisories and let me know if there are patched versions I should upgrade to?"},{"title":"Check npm package for supply chain risk","prompt":"I'm using lodash in my Node.js project — can you look up any active vulnerabilities or security advisories for npm:lodash and tell me what the safe version is?"},{"title":"Verify Go module security for code review","prompt":"We're doing a security review and need to know if golang.org/x/net has any open CVEs or GHSA advisories right now — can you pull that from OSV.dev?"}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory IDs, vulnerability descriptions, affected version ranges, and recommended patched versions for the queried open-source package, sourced live from Google OSV.dev.","failureModes":["Package not found in OSV.dev database — returns empty or null vulnerability list","Invalid ecosystem prefix in package identifier — returns validation error","OSV.dev upstream API unavailable — returns timeout or 502 error","Malformed package identifier format — returns 400 bad request","Package has no known vulnerabilities — returns empty advisories array"],"whenToPreferThis":"Choose this endpoint when you need live, up-to-date vulnerability intelligence for open-source packages across PyPI, npm, Go modules, or Rust crates, and want CVE and GHSA advisories sourced directly from Google OSV.dev. Prefer it over static SBOMs or cached databases when you need real-time accuracy for security reviews, CI/CD gating, or dependency audits.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:37:00.518Z","isFirstParty":false,"canonicalSlug":"serp-extract-agentdiet-dev-real-time-open-source-package-cve-ghsa-5ca26ef1"}