# undici CVE and Advisory Reference Mapping

> undici CVE and Advisory Reference Mapping is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns CVE identifiers and security advisory references for a specific version of the npm package undici, sourced from the OSV database.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-npm-undici-cve-map?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/undici-cve-and-advisory-reference-mapping-22b5132a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Jq5qpOjC9ItwLoCfeDmvr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability undici-cve-and-advisory-reference-mapping-22b5132a -d '<json body>'
```

Example prompt: Check if undici version 5.28.3 has any known CVEs or security advisories — I need the full list of vulnerability references from OSV.

## When to prefer this

Use this endpoint when you specifically need CVE and advisory data for the undici npm package and want a structured, version-resolved lookup against OSV — particularly useful in automated security pipelines, dependency audits, or CI/CD vulnerability checks where you need machine-readable advisory references rather than browsing the OSV website manually.

## Known failure modes

- Invalid or non-existent undici version returns empty results or an error
- Malformed version string may cause a validation error
- Network or upstream OSV data source unavailability leads to timeout
- Page token expiry or invalidity breaks paginated result retrieval

## How this service works

undici CVE and advisory reference mapping: CVE and advisory reference mapping for npm package undici, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A structured response containing CVE identifiers and security advisory references (e.g. GHSA IDs, OSV IDs) associated with the specified version of the undici npm package, drawn from the OSV vulnerability database. May include pagination via page_token for large result sets.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "undici",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/undici-cve-and-advisory-reference-mapping-22b5132a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)