Pricing

Pay per event

Try for free

Go to Apify Store

Dependency Vulnerability Scanner: CVE, KEV, EPSS

Try for free

Scan npm, PyPI, Maven, Go and other package versions for CVE vulnerabilities with OSV. A dependency security audit and CVE lookup with one row per package: worst severity, CVE IDs, CISA KEV flag, EPSS score, fixed version and end of life status. Reads package.json and requirements.txt.

Pricing

Pay per event

Rating

0.0

(0)

Developer

Malik Said

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Dependency Vulnerability Audit: npm, PyPI CVEs API

Below, you can find a list of relevant HTTP API endpoints for calling the Dependency Vulnerability Scanner: CVE, KEV, EPSS Actor. For this, you’ll need an Apify account. Replace <YOUR_API_TOKEN> in the URLs with your Apify API token, which you can find under API & Integrations in Apify Console. For details, see the API reference.

Run Actor

POST
https://api.apify.com/v2/actors/maliksaid~dependency-vulnerability-audit/runs?token=<YOUR_API_TOKEN>

Note: By adding the method=POST query parameter, this API endpoint can be called using a GET request and thus used in third-party webhooks. Please refer to our Run Actor API documentation.

Run Actor synchronously and get dataset items

POST
https://api.apify.com/v2/actors/maliksaid~dependency-vulnerability-audit/run-sync-get-dataset-items?token=<YOUR_API_TOKEN>

Note: This endpoint supports both POST and GET request methods. However, only the POST method allows you to pass input data. For more information, please refer to our Run Actor synchronously and get dataset items API documentation.

Get Actor

GET
https://api.apify.com/v2/actors/maliksaid~dependency-vulnerability-audit?token=<YOUR_API_TOKEN>

For more information, please refer to our Get Actor API documentation.

Actors can be used to scrape web pages, extract data, or automate browser tasks. Use the Dependency Vulnerability Scanner: CVE, KEV, EPSS API programmatically via the Apify API.

You can choose from:

Dependency Vulnerability Scanner: CVE, KEV, EPSS API in Python

Dependency Vulnerability Scanner: CVE, KEV, EPSS API in JavaScript

Dependency Vulnerability Scanner: CVE, KEV, EPSS API through CLI

Dependency Vulnerability Scanner: CVE, KEV, EPSS OpenAPI definition

You can start Dependency Vulnerability Scanner: CVE, KEV, EPSS with the Apify API by sending an HTTP POST request to the Run Actorendpoint. An Actor’s input and its content type can be passed as a payload of the POST request, and additional options can be specified using URL query parameters. The Dependency Vulnerability Scanner: CVE, KEV, EPSS is identified within the API by its ID, which is the creator’s username and the name of the Actor.

When the Dependency Vulnerability Scanner: CVE, KEV, EPSS run finishes you can list the data from its default dataset(storage) via the API or you can preview the data directly on Apify Console.

Wordpress Sites Vulnerabilities Scanner

xmiso_scrapers/wordpress-sites-vulnerabilities-scanner

Check wordpress site(s) for their vulnerabilities based on Wordfence vulnerabilities database. Bulk check hundreds WP sites at once if needed.

Miso

4.6

(5)

📦 npm Package Scraper - Downloads & Dependencies

benthepythondev/npm-package-scraper

Extract npm package data with download stats, dependencies, maintainers, and quality scores. Search by keyword, author, or get popular packages. Perfect for JavaScript ecosystem research, competitor tracking, and dependency analysis. Fast API-based extraction, pay-per-result.

Ben

NVD Critical CVE & KEV Vulnerability API

koalastuff/nvd-cve-vulnerability-monitor

Search NIST NVD CVEs by product, date, CVSS severity, CWE, CVE ID, or CISA KEV status. Export normalized cybersecurity vulnerability data for SOC teams.

Timo Schmidt

CVE Vulnerability Lookup

perryay/cve-vulnerability-lookup

Look up known vulnerabilities (CVEs) for software by name and version. Queries the NIST NVD database to find security issues affecting your tech stack.

Perry AY

Security Vulnerability Tracker (CVE)

scrapemint/cve-vulnerability-tracker

Track software security vulnerabilities from the US government NVD: search CVEs by keyword, vendor, product and severity, each row with CVSS score, CISA known-exploited flag and EPSS exploit probability. Monitor mode for new CVEs. No API key.

Ken M

5.0

(1)

Cyber Vulnerability Intelligence — CVE, KEV, EPSS & OSV

straightforward_hydra/cyber-vuln-intelligence

Fuse CISA KEV (actively exploited), NVD (CVE + CVSS), OSV.dev (package vulns) and EPSS (exploit probability). Look up CVEs, search, track known-exploited, scan packages. No key.

Dev D

Dependency Release Risk Monitor

q_services/dependency-release-risk-monitor

Monitor npm and PyPI packages for new releases, outdated versions, deprecation, licenses and OSV vulnerabilities.

Q Services

CISA Known Exploited Vulnerabilities Scraper

neuton/cisa-known-exploited-vulnerabilities-scraper

Export CISA Known Exploited Vulnerabilities catalog records by CVE, vendor, product, date added, ransomware flag, or keyword. Built for security prioritization and vulnerability intelligence.

Neuton Scripts

DepGuard MCP — Dependency Vulnerability Scanner

snipr/depguard-mcp

MCP server that stops AI coding agents from installing vulnerable packages. Checks any package against OSV.dev, or scans an entire lockfile (npm, PyPI, Cargo, Go & more) in one call — with severity thresholds, banned packages and triaged-CVE waivers.

Snithin P R

OSV Package Vulnerability Scanner

technicaldost/osv-package-vulnerability-scanner

Returns known vulnerabilities from the OSV database for packages in npm, PyPI, Maven, Go, NuGet, RubyGems and crates.io: vulnerability ID, aliases (CVE), severity, summary and fixed versions. Input: package names and versions.