# Stack Facts CVE Search

> Stack Facts CVE Search is a paid API for AI agents from g5joilnmeep4ntz3nwezxt5dmu.srv.us, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-19).

Search for CVEs by keyword, package, severity, or ecosystem — returning CISA KEV status, CVSS scores, OSV advisories, and ransomware association.

## Facts

- Endpoint: GET https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/cve/search?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/stack-facts-cve-search-48058ffa
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_si18CQygSzpobMMJEQpPd

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability stack-facts-cve-search-48058ffa
```

Example prompt: Before I install the log4j package in my Java project, can you check if it has any critical or exploited CVEs — especially ones in the CISA Known Exploited Vulnerabilities catalog or linked to ransomware?

## When to prefer this

Choose this endpoint when an AI agent needs to assess software security risk before installation, triage vulnerabilities for patching priority, or verify whether a specific CVE is actively exploited or ransomware-linked. It is especially valuable when you need CISA KEV status alongside OSV data in a single signed, pay-per-call call with no account setup required. Prefer over free NVD APIs when you need KEV enrichment, ransomware flags, and cryptographically signed responses in an agent workflow.

## Known failure modes

- Query string too short (under 2 characters) returns validation error
- No matching CVEs found returns empty results array with count 0
- Invalid severity enum value returns schema validation error
- Ecosystem string exceeds 20 characters returns error
- Payment not included or insufficient USDC returns HTTP 402
- Limit exceeds 50 returns validation error

## How this service works

Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.

## Output

Returns a list of matching CVE records with CVE ID, severity, CVSS score, vendor, product, summary, KEV status and date added, ransomware association flag, OSV package advisories, and dataset coverage metadata. Results are ordered by KEV status first, then by CVSS score descending. Also includes query echo, match count, and attribution/license info.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "type": "string",
     "const": "GET"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "q": {
       "type": "string",
       "maxLength": 100,
       "minLength": 2
      },
      "kev": {
       "type": "boolean"
      },
      "limit": {
       "type": "integer",
       "maximum": 50,
       "minimum": 1
      },
      "package": {
       "type": "string",
       "maxLength": 214,
       "minLength": 1
      },
      "severity": {
       "enum": [
        "low",
        "medium",
        "high",
        "critical"
       ],
       "type": "string"
      },
      "ecosystem": {
       "type": "string",
       "maxLength": 20
      }
     },
     "additionalProperties": false
    }
   }
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "json"
    },
    "example": {
     "type": "object",
     "required": [
      "data",
      "meta"
     ],
     "properties": {
      "data": {
       "type": "object"
      },
      "meta": {
       "type": "object"
      }
     }
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {
   "count": 1,
   "order": "in_kev first, then cvss (highes…",
   "query": {
    "q": "log4j",
    "kev": null,
    "limit": 20,
    "package": null,
    "severity": null,
    "ecosystem": null
   },
   "matched": 1,
   "results": [
    {
     "cve": "CVE-2021-44228",
     "cvss": null,
     "name": "Apache Log4j2 Remote Code Execu…",
     "in_kev": true,
     "vendor": "Apache",
     "product": "Log4j2",
     "summary": "Remote code injection in Log4j",
     "packages": [
      {}
     ],
     "severity": "critical",
     "advisories": [
      {}
     ],
     "kev_date_added": "2021-12-10",
     "known_ransomware": true
    }
   ],
   "coverage": {
    "nvd": false,
    "note": "Searches CISA KEV (vendor, prod…",
    "sources": [
     "CISA KEV"
    ],
    "osv_ecosystems": [
     "Go"
    ]
   },
   "truncated": false,
   "kev_catalog_version": "2026.10.10"
  },
  "meta": {
   "stale": false,
   "notice": "Normalised (modified) from the …",
   "dataset": "cve_search",
   "datasets": {
    "kev": {},
    "osv": {}
   },
   "licences": "/licences",
   "attribution": "KEV status from the CISA Known …"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/stack-facts-cve-search-48058ffa/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from g5joilnmeep4ntz3nwezxt5dmu.srv.us](https://www.zero.xyz/host/g5joilnmeep4ntz3nwezxt5dmu.srv.us/llms.txt)