vuln-intel
InactiveTool of The Stall
CVE and package vulnerability lookup via NVD + OSV (no API key needed). Two modes: (1) cve_id='CVE-2024-12345' returns CVSS score, severity, CWEs, description, and references from NVD; (2) package='requests' + ecosystem='PyPI' returns all known OSV vulnerabilities for that package. Useful for dependency audit pipelines, patch triage agents, and security disclosure drafting.
Parameters schema
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"cve_id": {
"type": "string",
"description": "CVE identifier (e.g. 'CVE-2024-12345'). Use this OR package+ecosystem — not both."
},
"package": {
"type": "string",
"description": "OSS package name to query for known vulns (e.g. 'requests', 'lodash', 'log4j'). Requires ecosystem."
},
"ecosystem": {
"type": "string",
"description": "Package ecosystem: PyPI, npm, Maven, Go, crates.io, NuGet, RubyGems, Packagist, Hex, Pub. Required with package."
}
},
"additionalProperties": false
}No endpoints wrapped at confidence ≥ 0.70.
Parent server
The Stall
1/7 registries