# certifi Known Vulnerability List (OSV/PyPI)

> certifi Known Vulnerability List (OSV/PyPI) is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-17).

Returns known security advisories for the PyPI package 'certifi' from the OSV database for a given version.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-pypi-certifi-advisories?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-17
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/certifi-known-vulnerability-list-osv-pypi-8b9d122d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_EmJHyptTzjRzckJ_n1gUA

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability certifi-known-vulnerability-list-osv-pypi-8b9d122d -d '<json body>'
```

Example prompt: Check if certifi version 2023.7.22 has any known vulnerabilities according to the OSV database.

## When to prefer this

Use this endpoint when you specifically need vulnerability data for the certifi Python package (the SSL certificate authority bundle) from the OSV advisory database. Prefer it over generic OSV query endpoints when you need a cheap, pre-scoped call for certifi only, without building a custom OSV API query. It is ideal for automated dependency auditing pipelines, CI/CD security gates, or quick one-off checks on a specific certifi version.

## Known failure modes

- Unknown or malformed version string returns empty advisory list or error
- Network timeout contacting upstream OSV API
- Pagination token invalid or expired causing page fetch failure
- Package name overridden to non-certifi value may yield unexpected results

## How this service works

certifi Known vulnerability list: Known vulnerability list for PyPI package certifi, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A list of OSV advisory records for the specified certifi version, including vulnerability IDs (e.g. CVE or GHSA identifiers), affected version ranges, severity, and any fixed-version information. If the version is 'latest', it resolves the current registry version first.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "certifi",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/certifi-known-vulnerability-list-osv-pypi-8b9d122d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)