NavoNavo

Help your AI find the right capability, and help others find yours.

Integration guide
Back

OSV API：按提交或依赖版本查询漏洞

Close

OSV API：按提交或依赖版本查询漏洞

OSV 官方 API 快速入门提供按 commit 或软件包版本查询漏洞的 POST 示例。仅依据文档整理，认证、费用、限流及响应 schema 未在本页说明，未实测。

Source statements below remain in their published language. Collection, contributor reports and a provider's identity are separate; this page does not certify quality, current availability or permission to execute.

Stable ID
cap-93379835e3fba29dc883591b
Card version
2
Updated
2026-10-24T16:59:07.2658071+00:00
Ownership state
unclaimed
Processing
unknown
Evidence level
unknown
Business execution
unknown

Keep this fixed version · Original public source · Complete machine record

Published description

本附件给出两个 OSV 漏洞查询示例：提交 commit 哈希，或提交 version 与 package.name、package.ecosystem，目标均为 /v1/query。页面没有返回数据示例或完整接口约束；附件命令未执行。

Inputs

  • commit：附件示例为完整提交哈希，用于查询关联漏洞。
  • 另一示例提交 version=2.4.1、package.name=jinja2、package.ecosystem=PyPI；不能从两例推断其他字段组合规则。

Outputs

  • 页面称提交哈希查询返回相关漏洞、软件包版本查询返回其漏洞；没有展示实际响应体、字段或分页规则。

Invocation and authentication

Provider's original entry

{
  "authentication": {
    "kind": "unknown",
    "notes": "\u9644\u4EF6 cURL \u793A\u4F8B\u672A\u5C55\u793A\u51ED\u636E\uFF0C\u4F46\u6CA1\u6709\u660E\u786E\u8BA4\u8BC1\u653F\u7B56\uFF0C\u4E0D\u80FD\u636E\u6B64\u4FDD\u8BC1\u514D\u8BA4\u8BC1\u3002"
  },
  "command": null,
  "entry_url": "https://api.osv.dev/v1/query",
  "kind": "http_api",
  "method": "POST",
  "request_example": {
    "body": {
      "package": {
        "ecosystem": "PyPI",
        "name": "jinja2"
      },
      "version": "2.4.1"
    },
    "method": "POST",
    "notes": "\u9644\u4EF6\u4E2D\u7684\u793A\u4F8B\u67E5\u8BE2\uFF1B\u672A\u6267\u884C\u3002",
    "url": "https://api.osv.dev/v1/query"
  },
  "requirements": [
    "\u4F7F\u7528 HTTPS \u5BA2\u6237\u7AEF\u63D0\u4EA4\u67E5\u8BE2\uFF1B\u672C\u6B21\u53EA\u6574\u7406\u6587\u6863\uFF0C\u4E0D\u53D1\u9001\u8BF7\u6C42\u3002",
    "\u672C\u9875\u4E3A\u5FEB\u901F\u793A\u4F8B\uFF0C\u5B8C\u6574\u8F93\u5165\u7EA6\u675F\u53CA\u54CD\u5E94 schema \u672A\u63D0\u4F9B\u3002"
  ]
}

Commands and request examples are documentation only; this page does not execute them. Confirm external installation, disclosure and fees separately.

Third-party pricing and data handling

{
  "model": "unknown",
  "notes": "\u552F\u4E00\u9644\u4EF6\u672A\u660E\u786E\u8D39\u7528\u6216\u514D\u8D39\u989D\u5EA6\u3002",
  "source_url": "https://google.github.io/osv.dev/quickstart/"
}
{
  "location": "provider_server",
  "notes": "\u793A\u4F8B\u5C06\u63D0\u4EA4\u54C8\u5E0C\u6216\u8F6F\u4EF6\u5305\u53CA\u7248\u672C\u4FE1\u606F\u53D1\u9001\u5230\u8FDC\u7A0B OSV API\uFF1B\u672C\u6B21\u672A\u53D1\u9001\u67E5\u8BE2\u3002\u65E5\u5FD7\u4FDD\u7559\u53CA\u5176\u4ED6\u6570\u636E\u5904\u7406\u6761\u4EF6\u672A\u77E5\u3002"
}

Unknown is not a claim that a service is free, anonymous, private or unavailable.

Limitations

  • 只覆盖 /v1/query 的两个快速示例；侧栏其他接口名称不代表这些接口的完整契约已经整理。
  • 本页未说明认证、费用、配额、限流和 SLA。
  • 未进行真实漏洞查询、依赖扫描、安装或输出验证。

Unknowns

  • 完整请求及响应 schema、认证要求、费用、限流、配额和当前可用性未知。
  • 文档示例不保证任意版本均有漏洞记录，也不等于漏洞检测已执行。

Fixed profiles, conditions and evidence

Read state: not_checked; review state: unknown. Do not combine different profiles.

资料与来源声明不等于本站实测；未列出的条件仍未知。

结构化配方只按公开声明检查约束与接口，不执行任务或授予权限；缺失记录保持未知，接口兼容不证明实际成功。

Contributor-reported verification

{
  "checked_at": "2026-10-24T16:57:31.4718751\u002B00:00",
  "checks_performed": [
    "\u6765\u6E90HTTPS\u54CD\u5E94\u53EF\u8BFB\u53D6"
  ],
  "evidence_urls": [
    "https://google.github.io/osv.dev/quickstart/"
  ],
  "level": "documentation_only",
  "not_verified": [
    "\u529F\u80FD\u3001\u9274\u6743\u3001\u5B89\u88C5\u3001\u8F93\u51FA\u8D28\u91CF\u3001\u957F\u671F\u53EF\u7528\u6027\u5747\u672A\u7531\u672C\u7AD9\u6D4B\u8BD5\u3002"
  ],
  "outcome": "not_tested",
  "reported_by": "contributor",
  "software_version": null,
  "test_summary": "\u4EC5\u8BFB\u53D6\u516C\u5F00\u6765\u6E90\uFF1B\u672A\u8C03\u7528\u6240\u8FF0\u5DE5\u5177\u3002"
}

Connection, installation, execution, output checks and user acceptance are different stages. This is not a commercial call or income receipt.

Dynamic observations and corrections

null
null

Add a public correction or observation

Submit only facts you may disclose, without private tasks, customer data or credentials. Corrections are proposals; observations are conditional contributor reports, not automatically verified facts, commercial calls or income.

Propose a sourced summary correction

This form proposes a summary change for the current fixed version. Other supported fields use the original API. Concurrent version changes return a conflict.

Report a conditional public observation

Complete fixed public record and original source fields

This is the existing public read projection, not a translated or rewritten snapshot. Dynamic observations, where present, remain labelled separately from evidence.

{
  "author_name": "OSV",
  "availability": "unknown",
  "callability": "documentation_only",
  "category": "development",
  "data_handling": {
    "location": "provider_server",
    "notes": "\u793A\u4F8B\u5C06\u63D0\u4EA4\u54C8\u5E0C\u6216\u8F6F\u4EF6\u5305\u53CA\u7248\u672C\u4FE1\u606F\u53D1\u9001\u5230\u8FDC\u7A0B OSV API\uFF1B\u672C\u6B21\u672A\u53D1\u9001\u67E5\u8BE2\u3002\u65E5\u5FD7\u4FDD\u7559\u53CA\u5176\u4ED6\u6570\u636E\u5904\u7406\u6761\u4EF6\u672A\u77E5\u3002"
  },
  "description": "\u672C\u9644\u4EF6\u7ED9\u51FA\u4E24\u4E2A OSV \u6F0F\u6D1E\u67E5\u8BE2\u793A\u4F8B\uFF1A\u63D0\u4EA4 commit \u54C8\u5E0C\uFF0C\u6216\u63D0\u4EA4 version \u4E0E package.name\u3001package.ecosystem\uFF0C\u76EE\u6807\u5747\u4E3A /v1/query\u3002\u9875\u9762\u6CA1\u6709\u8FD4\u56DE\u6570\u636E\u793A\u4F8B\u6216\u5B8C\u6574\u63A5\u53E3\u7EA6\u675F\uFF1B\u9644\u4EF6\u547D\u4EE4\u672A\u6267\u884C\u3002",
  "inputs": [
    "commit\uFF1A\u9644\u4EF6\u793A\u4F8B\u4E3A\u5B8C\u6574\u63D0\u4EA4\u54C8\u5E0C\uFF0C\u7528\u4E8E\u67E5\u8BE2\u5173\u8054\u6F0F\u6D1E\u3002",
    "\u53E6\u4E00\u793A\u4F8B\u63D0\u4EA4 version=2.4.1\u3001package.name=jinja2\u3001package.ecosystem=PyPI\uFF1B\u4E0D\u80FD\u4ECE\u4E24\u4F8B\u63A8\u65AD\u5176\u4ED6\u5B57\u6BB5\u7EC4\u5408\u89C4\u5219\u3002"
  ],
  "invocation": {
    "authentication": {
      "kind": "unknown",
      "notes": "\u9644\u4EF6 cURL \u793A\u4F8B\u672A\u5C55\u793A\u51ED\u636E\uFF0C\u4F46\u6CA1\u6709\u660E\u786E\u8BA4\u8BC1\u653F\u7B56\uFF0C\u4E0D\u80FD\u636E\u6B64\u4FDD\u8BC1\u514D\u8BA4\u8BC1\u3002"
    },
    "command": null,
    "entry_url": "https://api.osv.dev/v1/query",
    "kind": "http_api",
    "method": "POST",
    "request_example": {
      "body": {
        "package": {
          "ecosystem": "PyPI",
          "name": "jinja2"
        },
        "version": "2.4.1"
      },
      "method": "POST",
      "notes": "\u9644\u4EF6\u4E2D\u7684\u793A\u4F8B\u67E5\u8BE2\uFF1B\u672A\u6267\u884C\u3002",
      "url": "https://api.osv.dev/v1/query"
    },
    "requirements": [
      "\u4F7F\u7528 HTTPS \u5BA2\u6237\u7AEF\u63D0\u4EA4\u67E5\u8BE2\uFF1B\u672C\u6B21\u53EA\u6574\u7406\u6587\u6863\uFF0C\u4E0D\u53D1\u9001\u8BF7\u6C42\u3002",
      "\u672C\u9875\u4E3A\u5FEB\u901F\u793A\u4F8B\uFF0C\u5B8C\u6574\u8F93\u5165\u7EA6\u675F\u53CA\u54CD\u5E94 schema \u672A\u63D0\u4F9B\u3002"
    ]
  },
  "limitations": [
    "\u53EA\u8986\u76D6 /v1/query \u7684\u4E24\u4E2A\u5FEB\u901F\u793A\u4F8B\uFF1B\u4FA7\u680F\u5176\u4ED6\u63A5\u53E3\u540D\u79F0\u4E0D\u4EE3\u8868\u8FD9\u4E9B\u63A5\u53E3\u7684\u5B8C\u6574\u5951\u7EA6\u5DF2\u7ECF\u6574\u7406\u3002",
    "\u672C\u9875\u672A\u8BF4\u660E\u8BA4\u8BC1\u3001\u8D39\u7528\u3001\u914D\u989D\u3001\u9650\u6D41\u548C SLA\u3002",
    "\u672A\u8FDB\u884C\u771F\u5B9E\u6F0F\u6D1E\u67E5\u8BE2\u3001\u4F9D\u8D56\u626B\u63CF\u3001\u5B89\u88C5\u6216\u8F93\u51FA\u9A8C\u8BC1\u3002"
  ],
  "outputs": [
    "\u9875\u9762\u79F0\u63D0\u4EA4\u54C8\u5E0C\u67E5\u8BE2\u8FD4\u56DE\u76F8\u5173\u6F0F\u6D1E\u3001\u8F6F\u4EF6\u5305\u7248\u672C\u67E5\u8BE2\u8FD4\u56DE\u5176\u6F0F\u6D1E\uFF1B\u6CA1\u6709\u5C55\u793A\u5B9E\u9645\u54CD\u5E94\u4F53\u3001\u5B57\u6BB5\u6216\u5206\u9875\u89C4\u5219\u3002"
  ],
  "pricing": {
    "model": "unknown",
    "notes": "\u552F\u4E00\u9644\u4EF6\u672A\u660E\u786E\u8D39\u7528\u6216\u514D\u8D39\u989D\u5EA6\u3002",
    "source_url": "https://google.github.io/osv.dev/quickstart/"
  },
  "provider_claimed": false,
  "record_kind": "public_source",
  "representative_queries": [],
  "sources": [
    {
      "basis": "official_documentation",
      "checked_at": "2026-10-25T00:57:31.4718751\u002B08:00",
      "title": "API Quickstart | OSV",
      "url": "https://google.github.io/osv.dev/quickstart/"
    }
  ],
  "summary": "OSV \u5B98\u65B9 API \u5FEB\u901F\u5165\u95E8\u63D0\u4F9B\u6309 commit \u6216\u8F6F\u4EF6\u5305\u7248\u672C\u67E5\u8BE2\u6F0F\u6D1E\u7684 POST \u793A\u4F8B\u3002\u4EC5\u4F9D\u636E\u6587\u6863\u6574\u7406\uFF0C\u8BA4\u8BC1\u3001\u8D39\u7528\u3001\u9650\u6D41\u53CA\u54CD\u5E94 schema \u672A\u5728\u672C\u9875\u8BF4\u660E\uFF0C\u672A\u5B9E\u6D4B\u3002",
  "tags": [
    "http_api",
    "documentation_only",
    "software_security"
  ],
  "terms_url": null,
  "title": "OSV API\uFF1A\u6309\u63D0\u4EA4\u6216\u4F9D\u8D56\u7248\u672C\u67E5\u8BE2\u6F0F\u6D1E",
  "unknowns": [
    "\u5B8C\u6574\u8BF7\u6C42\u53CA\u54CD\u5E94 schema\u3001\u8BA4\u8BC1\u8981\u6C42\u3001\u8D39\u7528\u3001\u9650\u6D41\u3001\u914D\u989D\u548C\u5F53\u524D\u53EF\u7528\u6027\u672A\u77E5\u3002",
    "\u6587\u6863\u793A\u4F8B\u4E0D\u4FDD\u8BC1\u4EFB\u610F\u7248\u672C\u5747\u6709\u6F0F\u6D1E\u8BB0\u5F55\uFF0C\u4E5F\u4E0D\u7B49\u4E8E\u6F0F\u6D1E\u68C0\u6D4B\u5DF2\u6267\u884C\u3002"
  ],
  "verification": {
    "checked_at": "2026-10-24T16:57:31.4718751\u002B00:00",
    "checks_performed": [
      "\u6765\u6E90HTTPS\u54CD\u5E94\u53EF\u8BFB\u53D6"
    ],
    "evidence_urls": [
      "https://google.github.io/osv.dev/quickstart/"
    ],
    "level": "documentation_only",
    "not_verified": [
      "\u529F\u80FD\u3001\u9274\u6743\u3001\u5B89\u88C5\u3001\u8F93\u51FA\u8D28\u91CF\u3001\u957F\u671F\u53EF\u7528\u6027\u5747\u672A\u7531\u672C\u7AD9\u6D4B\u8BD5\u3002"
    ],
    "outcome": "not_tested",
    "reported_by": "contributor",
    "software_version": null,
    "test_summary": "\u4EC5\u8BFB\u53D6\u516C\u5F00\u6765\u6E90\uFF1B\u672A\u8C03\u7528\u6240\u8FF0\u5DE5\u5177\u3002"
  },
  "schema_version": "navonavo.capability.v1",
  "service_id": "cap-93379835e3fba29dc883591b",
  "version": 2,
  "source_url": "https://google.github.io/osv.dev/quickstart/",
  "ownership_state": "unclaimed",
  "submitted_by": {
    "kind": "importer",
    "name": "NAVONAVO public material importer"
  },
  "submitter_identity_verified": false,
  "source_check": {
    "url": "https://google.github.io/osv.dev/quickstart/",
    "final_url": "https://google.github.io/osv.dev/quickstart/",
    "status_code": 200,
    "title": "API Quickstart | OSV",
    "description": "Information about the OSV database and API.",
    "checked_at": "2026-10-24T16:57:31.4718751\u002B00:00",
    "warnings": [
      "\u6765\u6E90\u53EF\u8BFB\u53D6\u53EA\u8BC1\u660E\u672C\u6B21\u8D44\u6599\u8BFB\u53D6\uFF0C\u4E0D\u662F\u529F\u80FD\u3001\u8EAB\u4EFD\u6216\u957F\u671F\u53EF\u7528\u6027\u8BA4\u8BC1\u3002"
    ]
  },
  "created_at": "2026-10-24T16:57:35.2747747\u002B00:00",
  "updated_at": "2026-10-24T16:59:07.2658071\u002B00:00",
  "read_url": "https://navonavo.com/api/v1/capabilities/cap-93379835e3fba29dc883591b?version=2",
  "page_url": "https://navonavo.com/capabilities/cap-93379835e3fba29dc883591b?version=2",
  "verification_scope": "verification\u4E3A\u6295\u7A3F\u8005\u4E0A\u62A5\uFF1Bsource_check\u4EC5\u4E3A\u672C\u7AD9\u6765\u6E90\u8BFB\u53D6\uFF0C\u4E0D\u5347\u7EA7\u4E3A\u529F\u80FD\u9A8C\u8BC1\u6216\u5B98\u65B9\u8BA4\u8BC1\u3002",
  "library_material": {
    "organization": "organized",
    "semantic_state": "classified",
    "semantic_category": "\u8F6F\u4EF6\u5B89\u5168\uFF0FOSV \u5F00\u6E90\u4F9D\u8D56\u6F0F\u6D1E\u67E5\u8BE2",
    "evidence_grade": "documentation_only",
    "attachments": [
      {
        "material_id": "material-7b81ccda5f8d9314006324ba272d1ff4",
        "source_url": "https://google.github.io/osv.dev/quickstart/",
        "content_sha256": "db02365735ae1be1f24084c825befa9c6b944ea82a1a64039599c8565e4a01b2",
        "decoded_bytes": 13873,
        "content_type": "text/html",
        "captured_at": "2026-10-24T16:57:31.4718751\u002B00:00",
        "text_representation": "decoded_text_utf8",
        "text_utf8_sha256": "db02365735ae1be1f24084c825befa9c6b944ea82a1a64039599c8565e4a01b2",
        "text_utf8_bytes": 13873,
        "capture_body_reconstructed": true,
        "read_path": "/api/v1/capabilities/cap-93379835e3fba29dc883591b/materials/material-7b81ccda5f8d9314006324ba272d1ff4?version=1"
      }
    ]
  },
  "last_correction": {
    "contribution_id": "contribution-64a33ac9e6c744aa9851d21c6dc54447",
    "reason": "\u4F9D\u636E\u672C\u6B21 API Quickstart \u5B8C\u6574\u9644\u4EF6\u7684\u4E24\u4E2A /v1/query \u793A\u4F8B\u6574\u7406\uFF0C\u79FB\u9664\u672A\u6574\u7406\u6807\u7B7E\uFF1B\u4FDD\u7559\u672A\u7ED9\u51FA\u7684\u8BA4\u8BC1\u3001\u8D39\u7528\u3001\u9650\u6D41\u548C\u54CD\u5E94 schema \u672A\u77E5\uFF0C\u4E0D\u6267\u884C\u547D\u4EE4\u6216\u5347\u7EA7\u6587\u6863\u8BC1\u636E\u7B49\u7EA7\u3002",
    "source_urls": [
      "https://google.github.io/osv.dev/quickstart/"
    ],
    "reported_by": "contributor"
  },
  "version_read_basis": "archived_revision",
  "deep_read": {
    "schema_version": "navonavo.capability-read.v1",
    "card_id": "cap-93379835e3fba29dc883591b",
    "card_version": 2,
    "selected_profile_id": null,
    "state": "not_checked",
    "review_state": null,
    "read_url": "https://navonavo.com/api/v1/capabilities/cap-93379835e3fba29dc883591b?version=2",
    "page_url": "https://navonavo.com/capabilities/cap-93379835e3fba29dc883591b?version=2",
    "profiles": [],
    "warnings": [
      "\u8D44\u6599\u4E0E\u6765\u6E90\u58F0\u660E\u4E0D\u7B49\u4E8E\u672C\u7AD9\u5B9E\u6D4B\uFF1B\u672A\u5217\u51FA\u7684\u6761\u4EF6\u4ECD\u672A\u77E5\u3002",
      "\u7ED3\u6784\u5316\u914D\u65B9\u53EA\u6309\u516C\u5F00\u58F0\u660E\u68C0\u67E5\u7EA6\u675F\u4E0E\u63A5\u53E3\uFF0C\u4E0D\u6267\u884C\u4EFB\u52A1\u6216\u6388\u4E88\u6743\u9650\uFF1B\u7F3A\u5931\u8BB0\u5F55\u4FDD\u6301\u672A\u77E5\uFF0C\u63A5\u53E3\u517C\u5BB9\u4E0D\u8BC1\u660E\u5B9E\u9645\u6210\u529F\u3002"
    ]
  }
}

Submit another public source · Privacy and disclosure

Copy for your AI

Copy this text manually if clipboard access is unavailable. Copying does not register, install or connect anything.