{
  "x402Version": 2,
  "id": 5069,
  "slug": "5069",
  "resource": "https://api.osf-master-server.com/x402/security/cve/:cve_id",
  "description": "CVE lookup and exploit check by CVE id. Answers is this CVE actively exploited in the wild using the US CISA Known Exploited Vulnerabilities (KEV) catalog, with the EPSS exploitation probability score and CVSS severity. Each field carries a provenance URL to the official US source. For vulnerability management, patch prioritization, threat intelligence, and DevSecOps agents.",
  "type": "http",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0x72f62dE8b70d6CFa8Cc2dF6f21F243f289F3396c",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "50000",
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "bazaar": {
      "info": {
        "input": {
          "method": "GET",
          "pathParams": {
            "cve_id": ":cve_id"
          },
          "queryParams": {
            "format": "json"
          },
          "type": "http"
        },
        "output": {
          "example": {
            "actively_exploited": true,
            "audit_receipt": {
              "check_id": "uuid",
              "result_sha256": "..."
            },
            "compliance_note": "This is a decision-support signal, not a guarantee. Confirm against the linked authoritative sources (cisa.gov, nvd.nist.gov, first.org) before acting.",
            "coverage_note": "Direct lookup against the US CISA Known Exploited Vulnerabilities (KEV) catalog, the FIRST EPSS model score, and the NVD CVE record. 'actively_exploited' reflects presence on the CISA KEV catalog ONLY. A CVE that is NOT on KEV is not necessarily safe or unexploitable - it simply is not on CISA's confirmed-exploited list. EPSS is a probability estimate, not proof.",
            "epss": {
              "epss_probability": 0.984,
              "exploitation_band": "Critical"
            },
            "exploitation_summary": "ON the CISA KEV catalog - confirmed exploited in the wild.",
            "nvd": {
              "cvss_severity": "CRITICAL"
            },
            "provenance_urls": {
              "cisa_kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
            },
            "query": "CVE-2026-33017",
            "result": "FOUND",
            "service": "OSF Security - CVE Exploit Check"
          },
          "type": "json"
        }
      },
      "routeTemplate": "/x402/security/cve/:cve_id",
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "method": {
                "enum": [
                  "GET",
                  "HEAD",
                  "DELETE"
                ],
                "type": "string"
              },
              "pathParams": {
                "type": "object"
              },
              "queryParams": {
                "properties": {
                  "format": {
                    "description": "Response format (json).",
                    "type": "string"
                  }
                },
                "required": [
                  "format"
                ],
                "type": "object"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "properties": {
                  "actively_exploited": {
                    "description": "True if on the CISA KEV catalog.",
                    "type": "boolean"
                  },
                  "audit_receipt": {
                    "type": "object"
                  },
                  "compliance_note": {
                    "type": "string"
                  },
                  "coverage_note": {
                    "type": "string"
                  },
                  "epss": {
                    "type": "object"
                  },
                  "exploitation_summary": {
                    "type": "string"
                  },
                  "nvd": {
                    "type": "object"
                  },
                  "provenance_urls": {
                    "type": "object"
                  },
                  "query": {
                    "type": "string"
                  },
                  "result": {
                    "description": "FOUND, NOT_FOUND, or INVALID_INPUT",
                    "type": "string"
                  },
                  "service": {
                    "type": "string"
                  }
                },
                "required": [
                  "service",
                  "query",
                  "result",
                  "actively_exploited",
                  "compliance_note",
                  "audit_receipt"
                ],
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "bazaar"
  ],
  "sourceHost": "api.osf-master-server.com",
  "lastUpdated": "2026-08-26T06:17:30.322Z",
  "quality": {
    "calls30d": 1,
    "uniquePayers30d": 1,
    "lastCalledAt": "2026-08-26T06:17:30.092Z"
  },
  "liveness": {},
  "verified": false,
  "featured": false,
  "provider": {
    "host": "api.osf-master-server.com",
    "manifest_name": "api.osf-master-server.com",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-09-18T22:00:31.484Z"
  }
}