CVE / Dependency Advisory Monitor
Pricing
$20.00 / 1,000 target checkeds
CVE / Dependency Advisory Monitor
Monitor packages, CVEs, vendors, and products against OSV and CISA KEV. Returns deduped advisory rows for scheduled vulnerability-intelligence workflows.
Pricing
$20.00 / 1,000 target checkeds
Rating
0.0
(0)
Developer
Mack
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
2 days ago
Last modified
Categories
Share
A small vulnerability-intelligence actor for packages, vendor/product keywords, and specific CVE IDs.
It checks public advisory sources and emits structured rows with stable dedupe_key values so scheduled runs can be compared over time.
Sources
- OSV for open-source package advisories
- CISA Known Exploited Vulnerabilities for exploited-in-the-wild CVEs
Inputs
Package targets use ecosystem:name format:
{"packages": ["PyPI:requests", "npm:lodash"],"keywords": ["OpenSSL", "Chrome"],"cveIds": ["CVE-2023-4863"],"maxTargets": 50}
Supported package examples:
PyPI:requestsnpm:lodashMaven:org.apache.logging.log4j:log4j-coreGo:golang.org/x/cryptoNuGet:Newtonsoft.Jsoncrates.io:tokioRubyGems:railsPackagist:laravel/framework
Output
Rows include:
- Run summary with total findings
- One row per package target with OSV findings
- One CISA KEV keyword/CVE-search row
dedupe_keyfor every finding- CVE aliases, severity metadata, published/modified timestamps, references, KEV due dates, and ransomware-use flag where available
Pricing
Charged per target checked: $0.02 / target.
A package target counts as one target. A CISA KEV keyword/CVE search counts as one target for the whole keyword/CVE batch.
Limitations
- V1 is stateless. Use the
dedupe_keyfields to diff scheduled runs externally. - OSV lookup requires explicit
ecosystem:nametargets. It does not infer ecosystems automatically. - CISA KEV keyword matching is substring triage, not a full vendor inventory map.
- Findings do not prove your installed version is affected. Treat output as vulnerability-intelligence triage.