# webpack CVE and Advisory Reference Mapping

> webpack CVE and Advisory Reference Mapping is a paid API for AI agents from market.datapackvibe.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns CVE identifiers and security advisory references for a specific version of the npm package webpack, sourced from OSV.

## Facts

- Endpoint: POST https://market.datapackvibe.com/x402/signal-osv-npm-webpack-cve-map?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/webpack-cve-and-advisory-reference-mapping-bdf3d38f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_i2dYHZfmFlmcUmuO_088t

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability webpack-cve-and-advisory-reference-mapping-bdf3d38f -d '<json body>'
```

Example prompt: Can you pull up all the CVE and security advisory references for webpack version 5.75.0 from OSV so I can check if it's safe to use?

## When to prefer this

Use this endpoint when you specifically need CVE and advisory data for the webpack npm package from the OSV database, scoped to an exact version. Prefer this over general vulnerability scanners when you need a lightweight, per-version lookup tied to OSV's structured advisory records without running a full dependency tree scan.

## Known failure modes

- Unknown or unlisted version returns empty advisory set
- Invalid version string causes input validation error
- Package name mismatch (only webpack is in scope) returns no results
- Pagination token mismatch may cause incomplete result set
- Upstream OSV data lag may miss very recent advisories

## How this service works

webpack CVE and advisory reference mapping: CVE and advisory reference mapping for npm package webpack, from OSV. Accepts an exact version; latest resolves the registry version. Scope is the named package only.

## Output

A structured list of CVE identifiers and security advisory references (from OSV) associated with the specified webpack version, including advisory IDs, severity data, and fix version boundaries where available.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "package": {
   "type": "string",
   "default": "webpack",
   "maxLength": 150
  },
  "version": {
   "type": "string",
   "default": "latest",
   "maxLength": 100
  },
  "page_token": {
   "type": "string",
   "maxLength": 4000
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/webpack-cve-and-advisory-reference-mapping-bdf3d38f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from market.datapackvibe.com](https://www.zero.xyz/host/market.datapackvibe.com/llms.txt)