# Django Known Vulnerability List (OSV/PyPI)

> Django Known Vulnerability List (OSV/PyPI) is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns known security vulnerabilities for a specific version of the Django PyPI package, sourced from the OSV (Open Source Vulnerabilities) database.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-pypi-django-advisories?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/django-known-vulnerability-list-osv-pypi-9a89ab33
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_qtWUgAdSKh4RWJaPZLROh

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability django-known-vulnerability-list-osv-pypi-9a89ab33 -d '<json body>'
```

Example prompt: Can you check if Django version 4.2.1 has any known security vulnerabilities listed in the OSV database?

## When to prefer this

Choose this endpoint when you specifically need OSV-sourced vulnerability data for the Django Python package and want version-level granularity. It is ideal for automated security audits in CI/CD pipelines, dependency review workflows, or when building security dashboards that track Django vulnerabilities. Prefer this over generic NVD or GitHub Advisory searches when you need OSV-formatted, PyPI-scoped data specifically for Django.

## Known failure modes

- Invalid or unrecognized version string returns empty results or error
- Package field overridden with non-django value may return unexpected results since scope is fixed to django
- Pagination token mismatch or expiry causes retrieval failure
- Network or upstream OSV data source unavailability causes timeout
- Very new versions may not yet have advisory data indexed

## How this service works

django Known vulnerability list: Known vulnerability list for PyPI package django, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A list of known security advisories and vulnerabilities for the specified Django version, drawn from the OSV database. Each record typically includes vulnerability ID, description, affected version ranges, severity, and information about fixed versions. Results may be paginated via a page token.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "django",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/django-known-vulnerability-list-osv-pypi-9a89ab33/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)