# Pillow Known Vulnerability List (OSV)

> Pillow Known Vulnerability List (OSV) is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns known security vulnerabilities for a specific version of the PyPI package 'pillow', sourced from the OSV (Open Source Vulnerabilities) database.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-pypi-pillow-advisories?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/pillow-known-vulnerability-list-osv-83161f6b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_rqnAAD3TuTVnKh5quSnLy

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability pillow-known-vulnerability-list-osv-83161f6b -d '<json body>'
```

Example prompt: Can you check if pillow version 10.3.0 has any known security vulnerabilities from the OSV database?

## When to prefer this

Choose this endpoint when you specifically need vulnerability data for the Python 'pillow' image processing library from the OSV database. It is scoped exclusively to pillow on PyPI, making it faster and more targeted than a general-purpose OSV query tool. Ideal for automated CI/CD security checks, dependency auditing workflows, or developer tooling that monitors pillow upgrades.

## Known failure modes

- Invalid or non-existent version string returns empty results or an error
- Network timeout or upstream OSV unavailability causes request failure
- Malformed page_token results in pagination error
- Rate limiting or payment failure (x402) blocks the request

## How this service works

pillow Known vulnerability list: Known vulnerability list for PyPI package pillow, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A list of OSV advisory records for the specified pillow version, including vulnerability IDs, descriptions, affected version ranges, severity ratings, and any fixed version information. Supports pagination via page_token for large result sets.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "pillow",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/pillow-known-vulnerability-list-osv-83161f6b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)