CVE / Dependency Advisory Monitor avatar

CVE / Dependency Advisory Monitor

Pricing

$20.00 / 1,000 target checkeds

Go to Apify Store
CVE / Dependency Advisory Monitor

CVE / Dependency Advisory Monitor

Monitor packages, CVEs, vendors, and products against OSV and CISA KEV. Returns deduped advisory rows for scheduled vulnerability-intelligence workflows.

Pricing

$20.00 / 1,000 target checkeds

Rating

0.0

(0)

Developer

Mack

Mack

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

2 days ago

Last modified

Share

A small vulnerability-intelligence actor for packages, vendor/product keywords, and specific CVE IDs.

It checks public advisory sources and emits structured rows with stable dedupe_key values so scheduled runs can be compared over time.

Sources

Inputs

Package targets use ecosystem:name format:

{
"packages": ["PyPI:requests", "npm:lodash"],
"keywords": ["OpenSSL", "Chrome"],
"cveIds": ["CVE-2023-4863"],
"maxTargets": 50
}

Supported package examples:

  • PyPI:requests
  • npm:lodash
  • Maven:org.apache.logging.log4j:log4j-core
  • Go:golang.org/x/crypto
  • NuGet:Newtonsoft.Json
  • crates.io:tokio
  • RubyGems:rails
  • Packagist:laravel/framework

Output

Rows include:

  • Run summary with total findings
  • One row per package target with OSV findings
  • One CISA KEV keyword/CVE-search row
  • dedupe_key for every finding
  • CVE aliases, severity metadata, published/modified timestamps, references, KEV due dates, and ransomware-use flag where available

Pricing

Charged per target checked: $0.02 / target.

A package target counts as one target. A CISA KEV keyword/CVE search counts as one target for the whole keyword/CVE batch.

Limitations

  • V1 is stateless. Use the dedupe_key fields to diff scheduled runs externally.
  • OSV lookup requires explicit ecosystem:name targets. It does not infer ecosystems automatically.
  • CISA KEV keyword matching is substring triage, not a full vendor inventory map.
  • Findings do not prove your installed version is affected. Treat output as vulnerability-intelligence triage.