# CVE / Vulnerability Lookup

> CVE / Vulnerability Lookup is a paid API for AI agents from x402-hono-api.inraby.workers.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-13).

Look up a CVE ID and return an OSV-based vulnerability summary, severity rating, affected packages, and reference links for security triage.

## Facts

- Endpoint: POST https://x402-hono-api.inraby.workers.dev/api/v1/cve-lookup
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cve-vulnerability-lookup-86883233
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_1t9fxNTjvO5Scm1Z0u5VN

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cve-vulnerability-lookup-86883233 -d '<json body>'
```

Example prompt: Can you look up CVE-2021-44228 and give me a summary of the severity, which packages are affected, and any important reference links for our security triage?

## When to prefer this

Choose this endpoint when you need a quick, structured vulnerability summary for a known CVE ID — especially for agent-driven security triage where you need severity, affected packages, and reference links in a single call. Prefer this over raw NVD queries when you want OSV-normalized data that covers both Go, PyPI, npm, and Maven ecosystems alongside CVE identifiers. Ideal for enriching security alerts, dependency scan results, or incident reports with authoritative CVE context.

## Known failure modes

- Invalid or malformed CVE ID format returns an error
- CVE ID not found in OSV database returns empty or not-found response
- Network or Cloudflare Worker timeout on upstream OSV fetch
- Very recent CVEs not yet indexed in OSV may return incomplete data
- Payment failure via x402 protocol prevents endpoint access

## How this service works

CVE lookup and vulnerability search — resolve a CVE ID via OSV and return summary, severity, affected packages, and references for agent triage.

## Output

Returns an OSV-based vulnerability record including: CVE summary/description, CVSS or OSV severity rating, list of affected packages and version ranges, and curated reference links (NVD, GitHub advisories, patch notes, etc.) suitable for agent-driven security triage workflows.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "cveId": {
   "type": "string",
   "description": "CVE identifier (CVE-2021-44228)"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cve-vulnerability-lookup-86883233/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-hono-api.inraby.workers.dev](https://www.zero.xyz/host/x402-hono-api.inraby.workers.dev/llms.txt)