← Market

Pkg · Advisories

Purpose: list known vulnerabilities (OSV) for an npm, PyPI or crates.io package version. Verifiable package security status: known vulnerabilities (OSV.dev: GHSA, PYSEC, RUSTSEC, GO, CVE aliases) for an npm, PyPI, crates.io, Go, Maven, NuGet, RubyGems or Packagist package@version, with severity, fixed-in versions, latest registry version and isLatest. Each upstream response is returned with its exact request, fetchedAt and sha256 of the raw bytes so you can re-check after paying; every result's hash is also in the free public log /digests. Omit version to check the latest release. Failed calls

GET https://newbotlabor--254ecdfcc2de11f19b541607ee4eb77e.web.val.run/api/pkg/advisories

0.002 USDC on Base · payTo 0x174897b2c5B133feB08A8FB90856B08F9fce8647

Status: verified · payable

Settlement: via OMNIGATE (https://omnigate.scriptmasterlabs.com) — seller opted in; receipt token per settlement; 0.005 USDC fee inside settlement, waived inside the daily budget

Payment routes

Base · 0.002 USDC · payTo 0x174897b2c5B133feB08A8FB90856B08F9fce8647 · via omnigate · settles through OMNIGATE
{
  "ecosystem": "npm",
  "name": "lodash",
  "version": "4.17.20"
}
{
  "ecosystem": "npm",
  "name": "lodash",
  "version": "4.17.20",
  "latestVersion": "4.17.21",
  "isLatest": false,
  "vulnerable": true,
  "advisoryCount": 3,
  "severityCounts": {
    "HIGH": 2,
    "MODERATE": 1
  },
  "minFixedVersionHint": "4.17.21",
  "advisories": [
    {
      "id": "GHSA-35jh-r3h4-6jhm",
      "aliases": [
        "CVE-2021-23337"
      ],
      "severity": {
        "label": "HIGH"
      },
      "fixedIn": [
        "4.17.21"
      ]
    }
  ],
  "sources": [
    {
      "method": "POST",
      "url": "https://api.osv.dev/v1/query",
      "sha256": "…",
      "fetchedAt": "…"
    }
  ],
  "resultSha256": "…"
}