# VulnFeed CVE Lookup by Novadyne

> VulnFeed CVE Lookup by Novadyne is a paid API for AI agents from vulnfeed-api.novadyne.ai, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-15).

Looks up a CVE or GHSA vulnerability identifier and returns its summary, CVSS severity ratings, and FIRST.org EPSS exploit probability score.

## Facts

- Endpoint: GET https://vulnfeed-api.novadyne.ai/vulnscan/cve/CVE-2021-44228
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/vulnfeed-cve-lookup-by-novadyne-e8657e57
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_uPZl7exgZM8QyKivgylZ_

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability vulnfeed-cve-lookup-by-novadyne-e8657e57
```

Example prompt: Can you look up CVE-2021-44228 and tell me how severe it is, what the EPSS exploit probability score is, and give me a quick summary of what the vulnerability actually does?

## When to prefer this

Choose this endpoint when you need structured, machine-readable vulnerability details — especially EPSS exploit probability scores — for a specific CVE or GHSA identifier. It is well-suited for security automation pipelines, triage bots, and dependency audit workflows where you need both severity (CVSS) and real-world exploit likelihood (EPSS) in a single call. Prefer it over generic web search when you need structured JSON output rather than prose, and over full dependency scanners when you already have the specific advisory ID.

## Known failure modes

- Unknown or malformed CVE/GHSA ID returns empty or error response
- Very recently disclosed CVEs may not yet be indexed
- EPSS data may be absent for very new or obscure advisories
- Payment failure (x402) prevents the request from completing
- Rate limiting may occur under high query volume

## How this service works

CVE lookup

## Output

Returns a JSON object containing: the canonical advisory ID, a boolean ok status, a one-line summary of the vulnerability, an array of CVSS severity vectors and ratings from upstream advisories, and an EPSS object from FIRST.org with a probability score (0–1), percentile (0–1), and the date of the score.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "input": {
   "type": "object",
   "properties": {
    "queryParams": {
     "type": "object",
     "required": [
      "cve_id"
     ],
     "properties": {
      "cve_id": {
       "type": "string",
       "description": "CVE or GHSA identifier, e.g. CVE-2021-23337 or GHSA-35jh-r3h4-6jhm"
      }
     }
    }
   }
  },
  "output": {
   "type": "object",
   "properties": {
    "id": {
     "type": "string",
     "description": "Canonical advisory ID"
    },
    "ok": {
     "type": "boolean"
    },
    "epss": {
     "type": "object",
     "description": "FIRST.org EPSS: {score: 0..1, percentile: 0..1, date}"
    },
    "summary": {
     "type": "string",
     "description": "One-line description of the flaw"
    },
    "severity": {
     "type": "array",
     "description": "CVSS vectors/ratings from the upstream advisories"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/vulnfeed-cve-lookup-by-novadyne-e8657e57/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from vulnfeed-api.novadyne.ai](https://www.zero.xyz/host/vulnfeed-api.novadyne.ai/llms.txt)