# Pillow CVE and Advisory Reference Mapping

> Pillow CVE and Advisory Reference Mapping is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns CVE identifiers and security advisory references for a specific version of the Python Pillow (PIL) package, sourced from the OSV database.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-pypi-pillow-cve-map?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/pillow-cve-and-advisory-reference-mapping-80f2f4bf
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_itWLalJwdzc45-ZQkARO6

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability pillow-cve-and-advisory-reference-mapping-80f2f4bf -d '<json body>'
```

Example prompt: Can you check what CVEs and security advisories are associated with Pillow version 9.5.0 on PyPI?

## When to prefer this

Use this endpoint when you specifically need CVE and advisory data for the PyPI Pillow package scoped to a single exact version, particularly in automated dependency auditing, CI/CD security gates, or agent workflows that need structured OSV data without querying the full OSV API directly.

## Known failure modes

- Unknown or non-existent version returns empty advisory list or error
- Malformed version string may cause validation failure
- Pagination token mismatch may return incorrect page
- OSV upstream data lag may miss very recently published advisories
- Network or payment failure returns HTTP 402 or 5xx

## How this service works

pillow CVE and advisory reference mapping: CVE and advisory reference mapping for PyPI package pillow, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A structured list of CVE identifiers and OSV advisory references associated with the specified Pillow version, including advisory IDs, affected version ranges, and links to upstream vulnerability records.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "pillow",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/pillow-cve-and-advisory-reference-mapping-80f2f4bf/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)