New: every message picks a fast or a slow model

OSV

OSV provides an open vulnerability database and API for querying vulnerabilities by package, version, commit, or vulnerability identifier.

What agents can do

Actions5

  • Determine version

    Experimentally rank probable versions of an OSS-Fuzz C/C++ library from relative source-file paths and base64-encoded MD5 hashes.

  • Get import findings

    Experimentally list OSV records from one exact import source that failed import-time quality checks; intended for OSV source maintainers and may return no records.

  • Get vulnerability

    Return the complete OSV record for one case-sensitive vulnerability ID, including affected versions, ranges, severity, references, and aliases.

  • Query vulnerabilities

    Find full OSV vulnerability records affecting one package, package version, package URL, or commit.

  • Query vulnerabilities batch

    Check up to 1,000 packages, package versions, package URLs, or commits in one request and return position-matched compact vulnerability IDs.

How it connects

Nothing to connect: agents can use it straight away.

Keep the connection to yourself or share it with your workspace. Any action that writes or sends can wait for your approval.