Pricing

from $2.00 / 1,000 results

Try for free

Go to Apify Store

Dependency Vulnerability Advisor — Find Fixes, Not Just CVEs

Try for free

Check your dependencies against the OSV database and get the exact version to upgrade to. Returns an upgrade plan — one target version per package that clears the most findings at once — instead of a list of CVE IDs you still have to research.

Pricing

from $2.00 / 1,000 results

Rating

0.0

(0)

Developer

alaudin burki

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

Configure MCP server with Dependency Vulnerability Scanner & Fixes

The configuration above connects to the hosted Apify MCP server with the Dependency Vulnerability Scanner & Fixes Actor already loaded. It uses OAuth, so your client opens a browser window to sign you in to Apify on first use. No API token is needed. Clients without OAuth support can authenticate with an Authorization: Bearer header carrying an API token from API & Integrations in Apify Console.

Get a ready-to-use configuration for your MCP client with the Dependency Vulnerability Scanner & Fixes Actor preconfigured at https://mcp.apify.com/?tools=fetch-actor-details,alaudinburki/dependency-vulnerability-advisor.

You can connect to the Apify MCP Server using clients like Tester MCP Client, or any other MCP client of your choice.

If you want to learn more about our Apify MCP implementation, check out our MCP documentation. To learn more about the Model Context Protocol in general, refer to the official MCP documentation or read our blog post.

Open Source Dependency Vulnerability Scanner

scrapemint/dependency-vulnerability-scanner

Scan dependencies against the OSV.dev database. Supply packages as ecosystem:name@version (npm, PyPI, Go, Maven, crates.io and more); get one row per known vulnerability with OSV/GHSA id, CVE aliases, severity, affected range, and the fix version. Dedupe mode gives a new-vulnerability feed.

Ken M

5.0

Dependency Upgrade Planner MCP

reverberant_equality/mcp-dependency-upgrade-planner

Turn NPM package metadata, security advisories, and release data into actionable upgrade plans, version comparisons, security checks, and release-note summaries.

Jordan C

Manifest to OSV Vulnerability Triage

vedder1980/osv-manifest-triage

Triages up to 500 dependency versions against the public OSV vulnerability database.

Daniel Ferreira de Almeida

CVE Vulnerabilities Scraper: NVD Lookup & Dependency Audit

glitchbound/cve-scraper

Look up CVE vulnerabilities from NIST's NVD with CVSS score, CWE type and affected vendors, or audit your dependencies against Google's OSV to see which advisories hit the exact versions you run, each with the version that fixes it. npm, PyPI, Go, Maven. No API key.

Daniel Meshulam

Dependency Migration Check — verified upgrade risk

shoebill-dev27/dependency-migration-check

For every pinned dependency in a requirements.txt: how far behind it is and which execution-verified breaking changes sit in the upgrade path (LibPulse corpus).

Shinobu Otani

Package Vulnerability Scanner (OSV SCA, CVSS + Fixes)

scrapers_lat/package-vulnerability-scanner

Scan open-source packages for known vulnerabilities from OSV.dev (GHSA, CVE, PYSEC, RUSTSEC, GO). Query by name+ecosystem, exact version or git commit. Parsed CVSS score + severity, affected and fixed version ranges, CWEs and CVE aliases. Batch and version-specific.

Scrapers Lat

SBOM Vulnerability Scanner — Lockfile CVE Scan (OSV/KEV)

malonestar/sbom-vulnerability-rollup

SBOM vulnerability scanner at $0.02 per finding: paste an npm, pip or go lockfile and get a prioritized CVE report with upgrade targets. Batch-queries OSV.dev, flags CISA KEV known-exploited vulns, adds NVD CVSS, and computes the minimum fix version per package plus a severity rollup. Keyless.

Kyle Maloney

OSV Vulnerability Scraper - Package Risk Data

benthepythondev/osv-vulnerability-scraper

Scrape OSV vulnerability data for open-source packages: CVE/GHSA IDs, summaries, affected ranges and references.

Ben

CVE Vulnerability Lookup

perryay/cve-vulnerability-lookup

Look up known vulnerabilities (CVEs) for software by name and version. Queries the NIST NVD database to find security issues affecting your tech stack.

Perry AY

OSV-Scanner Vulnerability Checker

ayeeyee/osv-scanner-vulnerability-checker

Scan a git repository dependency manifests, package-lock.json, requirements.txt, go.sum, and more, against Google OSV.dev vulnerability database using OSV-Scanner. Get cross-ecosystem CVE matching across npm, PyPI, Go, Maven, and other package registries. $0.49 per completed scan.