# Vextorium Vulnerability Info (CVE/GHSA/PYSEC Lookup)

> Vextorium Vulnerability Info (CVE/GHSA/PYSEC Lookup) is a paid API for AI agents from api.vextorium.com, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-16).

Returns detailed vulnerability information for a given CVE, GHSA, or PYSEC identifier, including severity, CVSS vector, affected packages, fixed versions, and references, sourced from OSV.dev.

## Facts

- Endpoint: POST https://api.vextorium.com/vulnerabilidad-info-pago?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/vextorium-vulnerability-info-cve-ghsa-pysec-lookup-8b15121e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_IRwJNGqmX6DZaJ7V1Dnye

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability vextorium-vulnerability-info-cve-ghsa-pysec-lookup-8b15121e -d '<json body>'
```

Example prompt: Can you pull up the full vulnerability details for CVE-2021-44228, including the CVSS score, which packages are affected, and what versions fix it?

## When to prefer this

Choose this endpoint when you need structured, machine-readable vulnerability details from OSV.dev for a specific CVE, GHSA, or PYSEC identifier — particularly when you need CVSS scores, affected package ecosystems, and fixed version data in a single call. Prefer it over raw NVD or GitHub Advisory queries when you want a unified OSV-format response with cross-identifier aliases.

## Known failure modes

- Unknown or invalid vulnerability ID returns null or empty result
- Malformed identifier format causes request failure
- Vulnerability not yet indexed in OSV.dev returns no data
- Network timeout for slow OSV.dev upstream responses
- Missing fields (resumen, gravedad, paquete) may be null if OSV.dev data is incomplete

## How this service works

Details of a vulnerability by id (CVE-2021-44228, GHSA-..., PYSEC-...): summary, description, severity and CVSS vector, affected packages, fixed versions and references. OSV.dev data.

## Output

Returns a JSON object with the vulnerability's OSV ID, CVSS vector string(s), alias identifiers (e.g. GHSA or CVE cross-references), source attribution (OSV.dev CC BY 4.0), summary, severity, list of affected packages and ecosystems with fixed versions or commit hashes, publication and modification timestamps, full description text, and an array of reference URLs.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "identificador": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "id": "CVE-2021-44228",
  "cvss": [
   "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
  ],
  "alias": [
   "GHSA-jfh8-c2jp-5v3q"
  ],
  "fuente": "OSV.dev (CC BY 4.0)",
  "resumen": null,
  "gravedad": null,
  "afectados": [
   {
    "paquete": null,
    "ecosistema": null,
    "corregida_en": [
     "38513a7d57343881f7bf58f37e67d6a87e0a47c5",
     "ad361d2e517e765f69db464d9407ac2dd80bc93e"
    ]
   }
  ],
  "publicada": "2021-12-10T10:15:09.143Z",
  "modificada": "2026-08-13T04:01:09.237466383Z",
  "descripcion": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message p…",
  "referencias": [
   "https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md",
   "http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html"
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/vextorium-vulnerability-info-cve-ghsa-pysec-lookup-8b15121e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.vextorium.com](https://www.zero.xyz/host/api.vextorium.com/llms.txt)