1 viewer
Provider
OSV.dev advisories
Security advisories (RustSec, GitHub Advisory Database, CVE) for crates.io packages, keyed osv-{id}, each affects-linked to crate-{name} with the locked versions it matches and same_as-linked to its aliases. Input: params.crates, a comma-separated query, or params.lockfile_path (default runtime/Cargo.lock). Data licence per upstream database: RustSec CC0-1.0, GitHub Advisory Database CC-BY-4.0, recorded per advisory. OSV is keyless with no published rate limit: one querybatch of at most 1,000 packages per call, then vulns/{id} lookups 100 ms apart, capped by limit.
- Kind
- Data source
- Supplies
- osv_advisories
- Status
- active
- Endpoints
- 2
- Provider id
- osv
- Kind
- Data source
- Supplies
- osv_advisories
- Pull mode
- live
- Caller-supplied records
- Accepted
- Default source
- live
- Sync sources
- seed, payload, live
- Most records per sync
- 200
- Registry status
- active
- Registry updated
- Sun 4 Oct 2026 22:30:19 UTC
Endpoints
| Endpoint | Method | Address | What it returns |
|---|---|---|---|
| querybatch | POST | https://api.osv.dev/v1/querybatch | Advisory ids for up to 1,000 package versions |
| vuln | GET | https://api.osv.dev/v1/vulns/{id} | One advisory in full |
Recent runs
No run of this provider is among the 200 most recent runs on this node.