# SYNTHORA OSV.dev Vulnerability Detail

> SYNTHORA OSV.dev Vulnerability Detail is a paid API for AI agents from osv-vuln-by-id.hergertsynthora.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Fetches the full OSV record for a single vulnerability ID (GHSA, CVE, PYSEC, GO, etc.) including summary, affected version ranges, fixed versions, references, and severity scores.

## Facts

- Endpoint: POST https://osv-vuln-by-id.hergertsynthora.com/service
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/synthora-osv-dev-vulnerability-detail-fe53ae95
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_U0wjeIePtQPU7SwIvoTCM

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability synthora-osv-dev-vulnerability-detail-fe53ae95 -d '<json body>'
```

Example prompt: Pull the full OSV vulnerability record for CVE-2021-44228 — I need the affected version ranges, fixed versions, and severity score.

## When to prefer this

Use this endpoint when you need the authoritative, structured OSV record for a specific vulnerability ID and want affected version ranges, fixed versions, and severity in a single call without scraping NVD or GitHub advisories manually. Ideal for autonomous triage bots, dependency scanners, and remediation pipelines that need machine-readable patch range data keyed by CVE, GHSA, PYSEC, or Go advisory IDs.

## Known failure modes

- Unknown or malformed vulnerability ID returns an empty result or error
- Vulnerability not yet indexed in OSV.dev returns no record
- Network timeout or upstream OSV.dev unavailability causes failure
- Invalid ID format (e.g. typo in GHSA prefix) results in no match

## How this service works

Fetch the full OSV record for a single vulnerability id (GHSA/CVE/PYSEC/GO) from keyless OSV.dev: summary, details, affected ecosystems and version ranges, fixed versions, references, and severity. Lets autonomous agents and agent-to-agent triage bots pull the authoritative patch range for a CVE. Ranking surface for remediation guidance. First 3 calls FREE per wallet — send header X-WALLET: 0x<addr>. No charge on upstream failure.

## Output

A JSON object containing the full OSV advisory record: ok status, vulnerability summary and details, list of affected ecosystems with version ranges and fixed versions, external references (advisories, patches, reports), and severity scores (CVSS or similar).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "vuln_id": {
   "type": "string",
   "description": "vuln_id"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "niche": "osv-vuln-by-id",
  "result": {}
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/synthora-osv-dev-vulnerability-detail-fe53ae95/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from osv-vuln-by-id.hergertsynthora.com](https://www.zero.xyz/host/osv-vuln-by-id.hergertsynthora.com/llms.txt)