OSV Package Vulnerabilities
OSV · Dependency Security
Find known vulnerabilities for an open-source package version using the OSV.dev distributed vulnerability database.
- data-lookup
- dependencies
- developer
- free
- osv
- security
Price and execution
- Price
- Free
- Trust tier
- Verified
- Execution
- Managed call
- Capability group
- Dependency Security
Interface snapshot
- Protocol
- HTTP operation
- Operation
- POST /v1/query
- Interface artifact
- sha256:712e8088d925c9fb6556877fb885f29a181b69defc6c863316cc8f376f0ee3d2
- Manifest digest
- sha256:ce7990d24a8104fe9bef8f6696a7079345747ae04f9c41df21328b7fe1ecef38
Request fields
- body.version (string): the exact package version to query
- body.package.name (string, required): the package name
- body.package.ecosystem (string, required): the package ecosystem, e.g. npm, PyPI, Go, crates.io
Example queries
- {"version":"4.17.20","package":{"name":"lodash","ecosystem":"npm"}}