All projects matching “cve”

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions.

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (https://cve-intel.agentdiet.dev/v1/cve-intel)

Secret scan for exposed API keys, tokens, passwords, and credentials in text — returns redacted output without exposing matched secret values. Ideal for agent pre-flight checks before sharing config or logs.

CVE fact check, deterministic. Answers "is CVE-XXXX-NNNN real", "is it exploited in the wild", "what version fixes it", "how severe is it". Joins the NVD record (CVSS score, vector, dates), the CISA KEV catalog (actively-exploited flag, remediation due date, ransomware use), and OSV (affected packages + fixed versions per ecosystem). No LLM. Distinguishes "not a known CVE" from "registry unreachab

Is this CVE exploited? CVE lookup with KEV, ransomware use, EPSS and public exploits. $0.03 USDC on Base per call. Returns CVSS, affected products, advisories, CISA KEV and ransomware use, EPSS, public exploit repos, an AI-generated ATT&CK attack flow (flagged) and D3FEND countermeasures. Uncached CVEs return 404, not charged. Don't use this for CVEs not yet cached; they return 404 and are queued.

CVEs added to CISA KEV in the last 7 days (complete catalog), annotated with today's AIS ranks — or unlock every CVE route with an AIS CVE key ($19/30d): https://aislabs.ai/gateway/

Purpose-bound Adobe Fonts (Typekit) observation (fonts) using the existing fresh Stack-Monitor. Returns stack_adobe_fonts_decision, direct versus inferred status, evidence, optional version difference against a caller-owned baseline and reusable snapshot. Missing fingerprints do not prove absence. No background scheduling, CVE, compatibility or installed-extension inventory. Existing outbound safe

Security advisories: Known exploited vulnerabilities (CISA KEV) enriched with daily FIRST EPSS exploit probability. Use when a user asks whether a CVE is actively exploited, which vulnerabilities in a vendor or product to patch first, whether it is used in ransomware campaigns, or needs CISA KEV due dates, required actions and FIRST EPSS exploit probability in one call.

Scan up to 50 open-source packages (ecosystem, name, version) against OSV.dev: advisory ids, summary, severity, CVSS, fixed versions, CVE aliases with CISA KEV and EPSS joined, and a suggested minimum safe version.

Package vulnerability check — check one exact open-source dependency version or purl against OSV, enrich CVE matches with CISA KEV known-exploited signals, and report fixes, severity, and provenance.

Is this CVE weaponized? Returns enriched threat intelligence with exploit status, CVSS, EPSS, CISA KEV, ransomware mapping, and urgency score from 7 correlated sources.

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions.

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions.

Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) (/v1/cve-intel) — Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions.

Package security scanner — CVEs, license check, typosquat detection.

Prioritize up to 50 CVEs in one request using FIRST EPSS, CISA KEV, and known ransomware signals. Returns deterministic risk scores, urgency tiers, exploitation signals, vendor/product context, and remediation metadata as machine-readable JSON. Built for security automation and AI agents. No account or API key required. $0.01 per successful request via x402. Invalid input, no-signal results, and t