{"slug":"package-vulnerabilities-osv-8d684d53","name":"Package Vulnerabilities (OSV)","summary":"Known security vulnerabilities for an open-source package from OSV (GitHub advisories, PyPA, RustSec, Go): id, CVE aliases, summary, severity, fixed versions, for all versions or one version. Ecosystems: npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist. Use before installing or upgrading.","status":"live","headings":[{"slug":"code","title":"Code & developer tools"},{"slug":"security","title":"Security & risk checks"}],"indexable":true,"listed_since":"2026-10-25T17:52:15.822637Z","sources":[{"source":"x402_bazaar","external_id":"https://bess-x402.onrender.com/v1/dev/vulns","owner_address":"0x1129a6bb9c6165ff07fdc509c107b522ca0e1871","seen_at":"2026-11-10T10:13:52.279398Z","removed_at":null}],"endpoints":[{"url":"https://bess-x402.onrender.com/v1/dev/vulns","host":"bess-x402.onrender.com","protocol":"x402","state":"live","last_probe_at":"2026-11-10T20:57:09.086821Z","last_ok_at":"2026-11-10T20:57:09.086821Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"bess-x402-onrender-com-d4e77265","name":"bess-x402.onrender.com"}],"payment_options":[{"endpoint_url":"https://bess-x402.onrender.com/v1/dev/vulns","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"3000","pay_to":"0x1129a6bb9c6165ff07fdc509c107b522ca0e1871","observed_at":"2026-11-10T20:57:09.086821Z"},{"endpoint_url":"https://bess-x402.onrender.com/v1/dev/vulns","network":"eip155:137","scheme":"exact","rail":"exact","asset":"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359","coin":"USDC","asset_label":"USD Coin","amount":"3000","pay_to":"0x1129a6bb9c6165ff07fdc509c107b522ca0e1871","observed_at":"2026-11-10T20:57:09.086821Z"},{"endpoint_url":"https://bess-x402.onrender.com/v1/dev/vulns","network":"eip155:42161","scheme":"exact","rail":"exact","asset":"0xaf88d065e77c8cc2239327c5edb3a432268e5831","coin":"USDC","asset_label":"USD Coin","amount":"3000","pay_to":"0x1129a6bb9c6165ff07fdc509c107b522ca0e1871","observed_at":"2026-11-10T20:57:09.086821Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":2,"paid_calls_30d":2,"last_paid_at":"2026-10-23T10:36:34.136Z","reported_at":"2026-11-10T10:13:52.279398Z"},"assessment":{"method":"2026.11.3","checks":[{"id":"answers","state":"pass","reason":"Answered a check 3 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 16 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"2 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-11-11T00:32:44.819074Z"},"identity":{"endpoint_domains":["bess-x402.onrender.com"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}