Every known advisory for a package

Code-Snippets

curl "https://api.oanor.com/osv-api/v1/package" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/osv-api/v1/package", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/osv-api/v1/package");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/osv-api/v1/package",
    headers={"x-oanor-key": "oanor_test_..."}
)

Beispiel-Response

Echte Antwort dieses Endpoints, erfasst beim letzten Health-Check.

{
    "data": {
        "count": 10,
        "package": "lodash",
        "ecosystem": "npm",
        "vulnerabilities": [
            {
                "id": "GHSA-29mw-wpgm-hmr9",
                "aliases": [
                    "CVE-2020-28500"
                ],
                "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                "cwe_ids": [
                    "CWE-1333",
                    "CWE-400"
                ],
                "osv_url": "https://osv.dev/vulnerability/GHSA-29mw-wpgm-hmr9",
                "summary": "Regular Expression Denial of Service (ReDoS) in lodash",
                "modified": "2025-09-29T21:12:31.102523Z",
                "severity": "MODERATE",
                "published": "2022-01-06T20:30:46Z",
                "references_count": 20
            },
            {
                "id": "GHSA-35jh-r3h4-6jhm",
                "aliases": [
                    "CVE-2021-23337"
                ],
                "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "cwe_ids": [
                    "CWE-77",
                    "CWE-94"
                ],
                "osv_url": "https://osv.dev/vulnerability/GHSA-35jh-r3h4-6jhm",
                "summary": "Command Injection in lodash",
                "modified": "2025-08-12T21:55:57.719943Z",
                "severity": "HIGH",
                "published": "2021-05-06T16:05:51Z",
                "references_count": 17
            },
            {
                "id": "GHSA-4xc9-xhrj-v574",
                "aliases": [
                    "CVE-2018-16487"
                ],
                "cvss_v3": null,
                "cwe_ids": [
                    "CWE-400"
                ],
                "osv_url": "https://osv.dev/vulnerability/GHSA-4xc9-xhrj-v574",
                "summary": "Prototype Pollution in lodash",
                "modified": "2025-08-12T21:55:35.778975Z",
                "severity": "HIGH",
                "published": "2019-02-07T18:16:48Z",
                "references_count": 5
            },
            {
                "id": "GHSA-f23m-r3pf-42rh",
                "aliases": [
                    "CVE-2026-2950"
                ],
                "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
                "cwe_ids": [
                    "CWE-1321"
                ],
                "osv_url": "https://osv.dev/vulnerability/GHSA-f23m-r3pf-42rh",
                "summary": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`",
                "modified": "2026-04-02T17:29:51.565211556Z",
                "severity": "MODERATE",
                "published": "2026-04-01T23:50:27Z",
                "references_count": 4
            },
            {
                "id": "GHSA-fvqr-27wr-82fm",
                "aliases": [
                    "CVE-2018-3721"
                ],
                "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H
…