ghsa-advisory

Installation
SKILL.md

GitHub security advisory lookup

ghsa.advisory on https://fittings.sh. One endpoint, security.

The full GitHub Advisory Database record for a GHSA or CVE id: severity, CVSS, EPSS, CWEs, and the affected package and version ranges per ecosystem.

The call

GET https://fittings.sh/v1/ghsa/advisory
Field Type Required Notes
id string yes GHSA id (GHSA-jfh8-c2jp-5v3q) or CVE id (CVE-2021-44228)
maxAffected number no Affected package rows to return, 1-100, default 20
includeDescription boolean no Include the full advisory text, default false

Example input:

Installs
3
First Seen
Aug 18, 2026