Vulnerability Intelligence
One security advisory by GHSA or CVE id: severity, affected packages and ranges, fixed versions and exploited flag.
OtherLiveeip155:8453Exactvia cdp
AdvisoryGhsaCve
Calls · 30d
1
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 4 snapshots so far.
$24.31
Verified settled volume
1,175 settlements proven x402 by their on-chain EIP-3009 marker.
$0.020
Listed price
As published in the catalog. Always read the live 402 before paying.
1
Calls · 30d
Upstream's own call count for this endpoint, not ours.
1
Unique payers · 30d
Last called 2026-10-20 20:47Z
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0xb531320805C5BED1D46AEaDcF4F008FDF172DBDaThe wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.
Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Provider
The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.
Live 402 challenge
Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact",
"network": "base",
"mimeType": "application/json",
"resource": "https://vuln-intel.x402tookit.com/vuln-advisory",
"description": "One security advisory by GHSA or CVE id: severity, affected packages and ranges, fixed versions and exploited flag.",
"outputSchema": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"id": "GHSA-35jh-r3h4-6jhm"
}
},
"output": {
"id": "GHSA-35jh-r3h4-6jhm",
"asOf": "2026-10-11T03:32:37.269Z",
"cvss": [
{
"type": "CVSS_V3",
"vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"cwes": [
"CWE-77",
"CWE-94"
],
"source": "OSV.dev + CISA KEV",
"aliases": [
"CVE-2021-23337",
"CVE-2026-4800",
"…1 more"
],
"reasons": [
"Not in CISA KEV."
],
"summary": "GHSA-35jh-r3h4-6jhm: Command Injection in lodash Severity HIGH.",
"verdict": "SEVERITY_HIGH",
"affected": [
{
"name": "lodash",
"fixed": [
"4.17.21"
],
"ecosystem": "npm",
"introduced": [
"0"
]
},
{
"name": "lodash-es",
"fixed": [
"4.17.21"
],
"ecosystem": "npm",
"introduced": [
"0"
]
}
],
"degraded": false,
"modified": "2026-09-10T03:49:04.067984836Z",
"severity": "HIGH",
"published": "2021-05-06T16:05:51Z",
"sourceUrl": "https://api.osv.dev",
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"whether your code is reachable",
"other advisory databases"
],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23337",
"type": "ADVISORY"
},
{
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"type": "WEB"
}
]
}
},
"maxAmountRequired": "20000",
"maxTimeoutSeconds": 300
},
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "BFK9TLC3edb13K6v4YyH3DwPb5DSUpkWvb7XnqCL9b4F"
},
"payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
"scheme": "exact",
"network": "solana",
"mimeType": "application/json",
"resource": "https://vuln-intel.x402tookit.com/vuln-advisory",
"description": "One security advisory by GHSA or CVE id: severity, affected packages and ranges, fixed versions and exploited flag.",
"outputSchema": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"id": "GHSA-35jh-r3h4-6jhm"
}
},
"output": {
"id": "GHSA-35jh-r3h4-6jhm",
"asOf": "2026-10-11T03:32:37.269Z",
"cvss": [
{
"type": "CVSS_V3",
"vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"cwes": [
"CWE-77",
"CWE-94"
],
"source": "OSV.dev + CISA KEV",
"aliases": [
"CVE-2021-23337",
"CVE-2026-4800",
"…1 more"
],
"reasons": [
"Not in CISA KEV."
],
"summary": "GHSA-35jh-r3h4-6jhm: Command Injection in lodash Severity HIGH.",
"verdict": "SEVERITY_HIGH",
"affected": [
{
"name": "lodash",
"fixed": [
"4.17.21"
],
"ecosystem": "npm",
"introduced": [
"0"
]
},
{
"name": "lodash-es",
"fixed": [
"4.17.21"
],
"ecosystem": "npm",
"introduced": [
"0"
]
}
],
"degraded": false,
"modified": "2026-09-10T03:49:04.067984836Z",
"severity": "HIGH",
"published": "2021-05-06T16:05:51Z",
"sourceUrl": "https://api.osv.dev",
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"whether your code is reachable",
"other advisory databases"
],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23337",
"type": "ADVISORY"
},
{
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"type": "WEB"
}
]
}
},
"maxAmountRequired": "20000",
"maxTimeoutSeconds": 300
},
{
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact",
"network": "polygon",
"mimeType": "application/json",
"resource": "https://vuln-intel.x402tookit.com/vuln-advisory",
"description": "One security advisory by GHSA or CVE id: severity, affected packages and ranges, fixed versions and exploited flag.",
"outputSchema": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"id": "GHSA-35jh-r3h4-6jhm"
}
},
"output": {
"id": "GHSA-35jh-r3h4-6jhm",
"asOf": "2026-10-11T03:32:37.269Z",
"cvss": [
{
"type": "CVSS_V3",
"vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"cwes": [
"CWE-77",
"CWE-94"
],
"source": "OSV.dev + CISA KEV",
"aliases": [
"CVE-2021-23337",
"CVE-2026-4800",
"…1 more"
],
"reasons": [
"Not in CISA KEV."
],
"summary": "GHSA-35jh-r3h4-6jhm: Command Injection in lodash Severity HIGH.",
"verdict": "SEVERITY_HIGH",
"affected": [
{
"name": "lodash",
"fixed": [
"4.17.21"
],
"ecosystem": "npm",
"introduced": [
"0"
]
},
{
"name": "lodash-es",
"fixed": [
"4.17.21"
],
"ecosystem": "npm",
"introduced": [
"0"
]
}
],
"degraded": false,
"modified": "2026-09-10T03:49:04.067984836Z",
"severity": "HIGH",
"published": "2021-05-06T16:05:51Z",
"sourceUrl": "https://api.osv.dev",
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"whether your code is reachable",
"other advisory databases"
],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23337",
"type": "ADVISORY"
},
{
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"type": "WEB"
}
]
}
},
"maxAmountRequired": "20000",
"maxTimeoutSeconds": 300
}
],
"x402Version": 1,
"alsoAvailable": {
"llms": "https://vuln-intel.x402tookit.com/llms.txt",
"catalog": "https://vuln-intel.x402tookit.com/catalog",
"message": "Vulnerability Intelligence has 8 pay-per-call endpoints (Known vulnerabilities, exploited-in-the-wild status and exploit probability for software packages and CVEs.), from $0.02 a call. See the full menu and send your agents our way.",
"openapi": "https://vuln-intel.x402tookit.com/openapi.json",
"related": [
{
"url": "https://vuln-intel.x402tookit.com/vuln-cve",
"path": "/vuln-cve",
"what": "Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS exploit proba…",
"price": "$0.03"
},
{
"url": "https://vuln-intel.x402tookit.com/epss-score",
"path": "/epss-score",
"what": "EPSS exploit-probability score and percentile for up to 10 CVEs, ranked, with a high/elev…",
"price": "$0.02"
},
{
"url": "https://vuln-intel.x402tookit.com/kev-check",
"path": "/kev-check",
"what": "Is a CVE in CISA's Known Exploited Vulnerabilities catalog? Date added, due date, ransomw…",
"price": "$0.02"
}
]
}
}Accepts
The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.
0.02USDC≈ $0.02 USD
on Base · exact scheme
Pay 0.02 USDC on Base to 0xb531…2DBDa. The signed payment is good for 5 minutes.
- Paid to
- 0xb531…2DBDa
- USD Coin contract
- 0x8335…02913
- Payment window
- 5 minutes
- As published
- 20000 smallest units
20000units
on solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · exact scheme
That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.
- Paid to
- DUPiup…eEm8s
- Token contract
- EPjFWd…TDt1v
- Payment window
- 5 minutes
20000units
on Polygon · exact scheme
That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.
- Paid to
- 0xb531…2DBDa
- Token contract
- 0x3c49…c3359
- Payment window
- 5 minutes
20000units
on Arbitrum · exact scheme
That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.
- Paid to
- 0xb531…2DBDa
- Token contract
- 0xaf88…e5831
- Payment window
- 5 minutes
The catalog’s raw entry
[
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"amount": "20000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 300
},
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"
},
"payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
"amount": "20000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
},
{
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"amount": "20000",
"scheme": "exact",
"network": "eip155:137",
"maxTimeoutSeconds": 300
},
{
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"amount": "20000",
"scheme": "exact",
"network": "eip155:42161",
"maxTimeoutSeconds": 300
}
]Extensions
{
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"id": "GHSA-35jh-r3h4-6jhm"
}
},
"output": {
"type": "json",
"example": {
"id": "GHSA-35jh-r3h4-6jhm",
"asOf": "2026-10-11T03:32:37.269Z",
"cvss": [
{
"type": "CVSS_V3",
"vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"cwes": [
"CWE-77",
"CWE-94"
],
"source": "OSV.dev + CISA KEV",
"aliases": [
"CVE-2021-23337",
"CVE-2026-4800",
"…1 more"
],
"reasons": [
"Not in CISA KEV."
],
"summary": "GHSA-35jh-r3h4-6jhm: Command Injection in lodash Severity HIGH.",
"verdict": "SEVERITY_HIGH",
"affected": [
{
"name": "lodash",
"fixed": [
"4.17.21"
],
"ecosystem": "npm",
"introduced": [
"0"
]
},
{
"name": "lodash-es",
"fixed": [
"4.17.21"
],
"ecosystem": "npm",
"introduced": [
"0"
]
}
],
"degraded": false,
"modified": "2026-09-10T03:49:04.067984836Z",
"severity": "HIGH",
"published": "2021-05-06T16:05:51Z",
"sourceUrl": "https://api.osv.dev",
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"whether your code is reachable",
"other advisory databases"
],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23337",
"type": "ADVISORY"
},
{
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"type": "WEB"
}
]
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "Advisory id: GHSA-xxxx-xxxx-xxxx or CVE-YYYY-NNNN"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"id": {
"type": [
"null",
"string"
]
},
"asOf": {
"type": [
"null",
"string"
]
},
"cvss": {
"type": [
"array",
"null"
],
"items": {
"type": "object",
"properties": {
"type": {
"type": [
"null",
"string"
]
},
"vector": {
"type": [
"null",
"string"
]
}
}
}
},
"cwes": {
"type": [
"array",
"null"
],
"items": {
"type": "string"
}
},
"source": {
"type": [
"null",
"string"
]
},
"aliases": {
"type": [
"array",
"null"
],
"items": {
"type": "string"
}
},
"reasons": {
"type": [
"array",
"null"
],
"items": {
"type": "string"
}
},
"summary": {
"type": [
"null",
"string"
]
},
"verdict": {
"type": [
"null",
"string"
]
},
"affected": {
"type": [
"array",
"null"
],
"items": {
"type": "object",
"properties": {
"name": {
"type": [
"null",
"string"
]
},
"fixed": {
"type": [
"array",
"null"
],
"items": {
"type": "string"
}
},
"ecosystem": {
"type": [
"null",
"string"
]
},
"introduced": {
"type": [
"array",
"null"
],
"items": {
"type": "string"
}
}
}
}
},
"degraded": {
"type": [
"boolean",
"null"
]
},
"modified": {
"type": [
"null",
"string"
]
},
"severity": {
"type": [
"null",
"string"
]
},
"published": {
"type": [
"null",
"string"
]
},
"sourceUrl": {
"type": [
"null",
"string"
]
},
"disclaimer": {
"type": [
"null",
"string"
]
},
"notChecked": {
"type": [
"array",
"null"
],
"items": {
"type": "string"
}
},
"references": {
"type": [
"array",
"null"
],
"items": {
"type": "object",
"properties": {
"url": {
"type": [
"null",
"string"
]
},
"type": {
"type": [
"null",
"string"
]
}
}
}
}
}
}
}
}
}
}
}
}Provenance
- Seen in the source catalog
- 2026-10-20 20:47Z
- Last indexed by Roundhouse
- 2026-10-22 06:50Z
- Last enriched (probe, favicon, geo)
- 2026-10-20 22:45Z
- x402 version
- 2
- Max timeout
- 300s
- Liveness probe
- HTTP 402
Hand this page to an agent
Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.
GET api.roundhouseai.io/v0/endpoints
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 4 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.
Show the promptHide the prompt
Using Roundhouse, look up the x402 service Vulnerability Intelligence and tell me whether it is worth paying: what a call costs, whether the endpoint answered when last probed, and what its payment record actually shows. curl -s 'https://api.roundhouseai.io/v0/endpoints?q=Vulnerability%20Intelligence' curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>' Then call it: read the price from the live 402 at https://vuln-intel.x402tookit.com/vuln-advisory, never from a cached figure, and pay with an x402 client. The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except /v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further. If you do not have Roundhouse tools or skills installed, read https://roundhouseai.io/skill.md first — it is the whole procedure.