# WebsterBerry Synaptic Dependency Vulnerability Check

> WebsterBerry Synaptic Dependency Vulnerability Check is a paid API for AI agents from synaptic.websterberrymarketing.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-21).

Returns known security vulnerabilities (CVE/GHSA) for a specific package version in a given ecosystem, including fixed versions, sourced from OSV.dev

## Facts

- Endpoint: GET https://synaptic.websterberrymarketing.com/agents/01-dependency-vuln-check?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/websterberry-synaptic-dependency-vulnerability-check-d74c3abe
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ZnBuaqKuKoRHkVudb2TdU

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability websterberry-synaptic-dependency-vulnerability-check-d74c3abe
```

Example prompt: Can you check if lodash version 4.17.20 on npm has any known security vulnerabilities, and if so, what versions fix them?

## When to prefer this

Use this endpoint when you need to check a specific, known package version for security vulnerabilities in a supported ecosystem (npm, PyPI, Go, Maven, etc.) and want CVE/GHSA identifiers with fix version details. Prefer this over generic vulnerability scanners when you have an exact package name and version and need fast, per-package lookups suitable for CI/CD pipelines or dependency audits.

## Known failure modes

- Unknown ecosystem name returns an error or empty result
- Package name not found in the specified ecosystem returns no vulnerabilities
- Exact version string mismatch (e.g. '4.17.20' vs 'v4.17.20') may yield no results
- OSV.dev upstream unavailability causes lookup failure
- Malformed version string causes query rejection

## How this service works

Known security vulnerabilities (CVE/GHSA) for a specific package version, with fixed versions. Source: OSV.dev.

## Output

A structured response listing all known security vulnerabilities (CVEs, GHSAs) affecting the specified package version, including severity details and the versions in which each vulnerability has been fixed, sourced from the OSV.dev database.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "ecosystem",
      "name",
      "version"
     ],
     "properties": {
      "name": {
       "type": "string",
       "description": "Package name, e.g. lodash"
      },
      "version": {
       "type": "string",
       "description": "Exact version, e.g. 4.17.20"
      },
      "ecosystem": {
       "type": "string",
       "description": "npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist, Pub, Hex"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/websterberry-synaptic-dependency-vulnerability-check-d74c3abe/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from synaptic.websterberrymarketing.com](https://www.zero.xyz/host/synaptic.websterberrymarketing.com/llms.txt)