# Stack Facts CVE Lookup

> Stack Facts CVE Lookup is a paid API for AI agents from g5joilnmeep4ntz3nwezxt5dmu.srv.us, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-13).

Returns full vulnerability details for a CVE ID, including CISA KEV status, OSV advisories, exploitability, and known ransomware association, with a cryptographically signed response.

## Facts

- Endpoint: GET https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/cve/%7Bid%7D?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/stack-facts-cve-lookup-ff4e3dbf
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_i0FiFrvxFDnv_M_oIcuT-

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability stack-facts-cve-lookup-ff4e3dbf
```

Example prompt: Can you pull up the full vulnerability details for CVE-2021-44228 — specifically whether it's in the CISA Known Exploited Vulnerabilities list, if it's linked to ransomware, and which package versions fix it?

## When to prefer this

Choose this endpoint when you need authoritative, signed vulnerability data for a specific CVE, particularly when you need to cross-reference CISA KEV exploitation status alongside OSV advisory details in a single call. It is ideal for AI agents performing automated security triage, dependency audits, or threat enrichment pipelines that require tamper-evident, pay-per-use data without managing API keys or accounts. Prefer over raw CISA or OSV APIs when you need a unified, pre-normalized response with provenance metadata.

## Known failure modes

- CVE ID not found in either KEV or OSV — returns empty advisories array with advisory_count 0
- Malformed CVE ID format — may return 4xx error
- Dataset temporarily stale — meta.stale flag set to true with stale_at timestamp
- Payment not included or insufficient — 402 Payment Required response before data is returned
- Network or server error — 5xx response

## How this service works

Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.

## Output

Returns a JSON object with the CVE ID, full CISA KEV entry (vendor, product, required action, due date, ransomware flag), OSV advisory list (GHSA IDs, affected packages, fix versions, severity label, publish date), advisory count, dataset freshness metadata, and a cryptographic signature verifying the data integrity.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {
   "cve": "CVE-2021-44228",
   "kev": {
    "cve": "CVE-2021-44228",
    "name": "Apache Log4j2 Remote Code Execu…",
    "in_kev": true,
    "vendor": "Apache",
    "product": "Log4j2",
    "due_date": "2021-12-24",
    "date_added": "2021-12-10",
    "notes_urls": [
     "https://nvd.nist.gov/vuln/detai…"
    ],
    "required_action": "For all affected software asset…",
    "known_ransomware": true
   },
   "cvss": null,
   "in_kev": true,
   "priority": "critical",
   "advisories": [
    {
     "id": "GHSA-jfh8-c2jp-5v3q",
     "kind": "vuln",
     "aliases": [
      "CVE-2021-44228"
     ],
     "sources": [
      {}
     ],
     "summary": "Remote code injection in Log4j",
     "affected": [
      {}
     ],
     "modified": "2025-10-22T19:37:02Z",
     "severity": [],
     "ecosystem": "Maven",
     "published": "2021-12-10T00:40:56Z",
     "severity_label": "CRITICAL"
    }
   ],
   "priority_rule": "critical: in CISA KEV; null: no…",
   "advisory_count": 1,
   "priority_basis": "kev",
   "kev_catalog_version": "2026.10.10"
  },
  "meta": {
   "stale": false,
   "notice": "Normalised (modified) from the …",
   "dataset": "cve",
   "datasets": {
    "kev": {},
    "osv": {}
   },
   "licences": "/licences",
   "attribution": "KEV status from the CISA Known …"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/stack-facts-cve-lookup-ff4e3dbf/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from g5joilnmeep4ntz3nwezxt5dmu.srv.us](https://www.zero.xyz/host/g5joilnmeep4ntz3nwezxt5dmu.srv.us/llms.txt)