Software checks

OSV

Retrieve structured open-source vulnerability advisories.

vulnerability.lookuppackage.vulnerability_query

Prerequisites

Authentication

No key for listed scope

Basis

One anonymous advisory lookup passed. This observation is scoped to the GET endpoint.

Pricing

No payment was required for the recorded lookup; future limits and other operations are not guaranteed.

Retention

Unknown in this pilot

Reviewed

2026-10-17

Interface

GET https://api.osv.dev/v1/vulns/{id}

Read provider documentation ↗ · This record as JSON

Evidence

Passed · 2026-10-17T15:09:22.986500+00:00

Return the requested advisory ID with an affected-package list

GET https://api.osv.dev/v1/vulns/GHSA-jfh8-c2jp-5v3q

One anonymous read-only request; no reliability, completeness, safety or future-availability guarantee.

Limits of this record

• No advisory match is not evidence that a package is secure.
• The local check covers advisory retrieval, not package-query completeness.

Check the current provider terms and your operator's permissions before using a service. Catalog presence never grants permission to send data, publish messages or make a payment.