Get vulnerability
Action ID:tools.osv.get_vulnerability
Get a vulnerability. Calls GET /v1/vulns/{vulnerability_id} directly.
Reference: https://google.github.io/osv.dev/get-v1-vulns/
Input fields
string
required
OSV vulnerability identifier.
string | null
Base URL of the OSV.dev API.Default:
null.Query vulnerabilities
Action ID:tools.osv.query_vulnerabilities
Query vulnerabilities. Calls POST /v1/query directly with an OSV API-native payload.
Reference: https://google.github.io/osv.dev/post-v1-query/
Input fields
string | null
Base URL of the OSV.dev API.Default:
null.string | null
The commit hash to query for. If specified, version should not be set.Default:
null.string | null
The ecosystem for this package, such as PyPI, npm, Maven, Go, crates.io, NuGet, RubyGems, or GIT.Default:
null.string | null
Name of the package. Should match the name used in the package ecosystem. Must be paired with ecosystem and must not be used with purl.Default:
null.string | null
OSV pagination token from a previous next_page_token response.Default:
null.string | null
The package URL for this package. Must not be used with package_name or ecosystem.Default:
null.string | null
The version string to query for. A fuzzy match is done against upstream versions. Must not be used with commit or with a versioned purl.Default:
null.Query vulnerabilities batch
Action ID:tools.osv.query_vulnerabilities_batch
Query vulnerabilities in a batch. Calls POST /v1/querybatch directly and passes each OSV query through untouched.
Reference: https://google.github.io/osv.dev/post-v1-querybatch/
Input fields
array[object]
required
OSV API-native query objects.
string | null
Base URL of the OSV.dev API.Default:
null.