Known CVEs/advisories for an exact package version (OSV.dev)

Security audit of one exact dependency version, backed by OSV.dev (Google), which aggregates public advisories (GHSA, PyPA, RustSec...) in near real time. Query: ?pkg=lodash&ecosystem=npm&version=4.17.20 (ecosystems: npm, pypi, go, crates.io, maven, nuget, rubygems, packagist, hex, pub). Returns vuln_count, max_severity, advisory ids and the versions that fix them; vuln_count=0 means clean. Cached 1h.

get/v1/dev/vulns

Request

  • Base URL: https://data.greeneris.io (the document declares no server; this is the origin it was published from)
  • URL: https://data.greeneris.io/v1/dev/vulns
  • Auth: none declared

Query parameters

pkgstring required

Exact package name, e.g. lodash

ecosystem'cargo' | 'crates.io' | 'go' | 'hex' | 'maven' | 'npm' | 'nuget' | 'packagist' | 'pub' | 'pypi' | 'rubygems'

Package ecosystem

versionstring required

Exact version to audit, e.g. 4.17.20

Response

Successful response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.