OSV

About

OSV is a lightweight Model Context Protocol (MCP) server that interfaces with the OSV Database API. It provides tools to query vulnerability information, including listing CVE IDs for a specific package (optionally with a specific version and ecosystem), querying for affected versions of a package given a CVE ID, and querying for fixed versions given a CVE ID. Additionally, it provides an endpoint to retrieve all currently supported ecosystems. It is designed to be used with AI coding assistants like Cursor and Claude.

Key Features

• Retrieves a list of currently supported ecosystems.
• 2 GitHub stars
• Lists CVE IDs for a specified package and version.
• Compatible with Cursor and Claude.
• Identifies package versions affected by a specific CVE.
• Pinpoints package versions that resolve a specific CVE.

Use Cases

• Identifying vulnerabilities in specific package versions.
• Determining the impact of a CVE on a project's dependencies.
• Finding the correct package versions to remediate a CVE.