# cve.genexxis.com Package Vulnerability Scanner

> cve.genexxis.com Package Vulnerability Scanner is a paid API for AI agents from cve.genexxis.com, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-30).

Scans up to 50 open-source packages against OSV.dev and enriches results with CISA KEV and EPSS scores, returning advisory details, CVSS scores, fixed versions, and a suggested minimum safe version.

## Facts

- Endpoint: POST https://cve.genexxis.com/packages?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cve-genexxis-com-package-vulnerability-scanner-80fc8f7e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_YBclFoSshCqO0HroVXrQh

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cve-genexxis-com-package-vulnerability-scanner-80fc8f7e -d '<json body>'
```

Example prompt: Can you scan these npm packages for known vulnerabilities: lodash 4.17.15, axios 0.21.1, and express 4.17.1 — and tell me their CVSS scores, whether any are in the CISA KEV list, their EPSS exploit probability, and what the minimum safe version is for each?

## When to prefer this

Choose this endpoint when you need bulk vulnerability scanning of multiple open-source packages across different ecosystems in a single call, especially when you need CISA KEV and EPSS enrichment alongside CVSS scores and upgrade recommendations. It is ideal for CI/CD security gates, dependency audits, and supply chain risk assessments where OSV.dev advisory data enriched with real-world exploitability signals is required. Prefer this over single-CVE lookup endpoints when starting from a package list rather than a known CVE ID.

## Known failure modes

- More than 50 packages submitted — request rejected or truncated
- Unknown or unsupported ecosystem name — package skipped or error returned
- Package name or version not found in OSV.dev — returns no vulnerabilities (not an error)
- OSV.dev upstream unavailable — service may return error or stale data
- Malformed package entries missing required ecosystem or name fields — validation error
- Network timeout on EPSS or KEV enrichment — partial results may be returned without enrichment data

## How this service works

Vulnerability intelligence for triage agents. /cve looks up a CVE id or searches NVD by keyword (same params as other CVE APIs: id or keyword, severity, maxItems, plus days) and returns CVSS v3.1 and v4.0 scores and vectors, CWE, affected CPE products, references, plus the CISA Known Exploited Vulnerabilities status (date added, due date, ransomware use, required action), the FIRST EPSS exploitation probability and percentile, and a one-line patch priority. /kev lists the latest actively exploited CVEs with EPSS. /packages scans up to 50 open-source dependencies (npm, PyPI, Maven, Go, crates.io, NuGet, RubyGems, ...) against OSV.dev with fixed versions and KEV/EPSS joined. NVD live (cached 1 h), KEV and EPSS refreshed every 6 h.

## Output

Returns a JSON object with a timestamp, source attribution, per-package results including vulnerability count, maximum severity, individual advisory details (advisory ID, CVE aliases, CVSS score and vector, EPSS score and percentile, CISA KEV status, fixed versions, and summary), a suggested minimum safe version per package, and aggregate totals for packages scanned, vulnerable packages, and total vulnerabilities found.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "packages": {
   "type": "array",
   "description": "Up to 50 items {ecosystem (npm, PyPI, Maven, Go, crates.io, NuGet, RubyGems, Packagist, ...), name, version (optional)}"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "asOf": "2026-10-25T03:40:00.000Z",
  "inKev": 0,
  "source": "OSV.dev + CISA KEV + FIRST EPSS",
  "results": [
   {
    "name": "lodash",
    "count": 5,
    "inKev": false,
    "version": "4.17.15",
    "ecosystem": "npm",
    "vulnerable": true,
    "maxSeverity": "HIGH",
    "vulnerabilities": [
     {
      "id": "GHSA-p6mc-m468-83gw",
      "kev": null,
      "cves": [
       "CVE-2020-8203"
      ],
      "cvss": {
       "score": 7.4,
       "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H"
      },
      "epss": {
       "score": 0.04,
       "percentile": 0.88
      },
      "aliases": [
       "CVE-2020-8203"
      ],
      "fixedIn": [
       "4.17.19"
      ],
      "summary": "Prototype Pollution in lodash",
      "severity": "HIGH"
     }
    ],
    "suggestedMinimumVersion": "4.17.21"
   }
  ],
  "totalVulns": 9,
  "packagesScanned": 2,
  "vulnerablePackages": 2
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cve-genexxis-com-package-vulnerability-scanner-80fc8f7e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cve.genexxis.com](https://www.zero.xyz/host/cve.genexxis.com/llms.txt)