---
title: "Known CVEs/advisories for an exact package version (OSV.dev)"
method: GET
path: "/v1/dev/vulns"
---

# Known CVEs/advisories for an exact package version (OSV.dev)

`GET /v1/dev/vulns`

## Request

- Base URL: `https://data.greeneris.io` (the document declares no server; this is the origin it was published from)
- URL: `https://data.greeneris.io/v1/dev/vulns`
- Auth: none declared

Security audit of one exact dependency version, backed by OSV.dev (Google), which aggregates public advisories (GHSA, PyPA, RustSec...) in near real time. Query: ?pkg=lodash&ecosystem=npm&version=4.17.20 (ecosystems: npm, pypi, go, crates.io, maven, nuget, rubygems, packagist, hex, pub). Returns vuln_count, max_severity, advisory ids and the versions that fix them; vuln_count=0 means clean. Cached 1h.

## Query parameters

- `pkg` string, required
- `ecosystem` 'cargo' | 'crates.io' | 'go' | 'hex' | 'maven' | 'npm' | 'nuget' | 'packagist' | 'pub' | 'pypi' | 'rubygems'
- `version` string, required

## Response `200`

Successful response

- unknown

---

[API](https://skmtc.dev/greeneris/apis/eu-verify.md) · [All operations](https://skmtc.dev/greeneris/apis/eu-verify/llms.txt) · [OpenAPI document](https://skmtc.dev/greeneris/apis/eu-verify/revisions/766cf4a67d8f?raw)