OSV Vulnerability Scan

Analyze open-source package vulnerabilities via the live OSV API. Never invent OSV/CVE/GHSA IDs; every claim needs API evidence.

When to use

• User asks for a vulnerability check, dependency audit, or CVE/OSV lookup
• Reviewing lockfiles / manifests for known vulns
• Looking up a specific OSV ID, GHSA, or CVE mapped in OSV
• Prioritizing remediation after a security review

For lockfile parsing patterns, also load skill dependency-sbom-osv. For full API shapes and pagination, see reference.md or skill osv-api-reference.

Base URL

https://api.osv.dev/v1/

Key endpoints