Osv

Look up open-source vulnerabilities and guide remediation decisions.

Source

Official Registry

Updated

2026-06-10

// securityCaution

Remote endpoint· gateway.pipeworx.io
Runs locally
Official / curated
Open source
Community-trusted

Running security audit…

Credentials
Network egress
Code execution
Data access
Supply chain

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "Osv" MCP server from askskill:
Run: claude mcp add --transport http 'io-github-pipeworx-io-osv' 'https://gateway.pipeworx.io/osv/mcp'

// examples

Check dependency vulnerabilities

Prompt

Check whether these package.json dependencies have known vulnerabilities: react 18.2.0, lodash 4.17.21, axios 1.6.0, and sort the results by severity.

Expected

A list of known vulnerabilities, severity, affected versions, and fix recommendations for each dependency.

Generate a remediation plan

Prompt

I want a vulnerability remediation list for my project: based on known OSV records, summarize packages to upgrade, recommended versions, and priority.

Expected

An actionable remediation plan with prioritized upgrade steps.

Security audit

Prompt

Perform a quick security audit on these open-source components, identify high-risk vulnerabilities, and state whether fixes are available: openssl, log4j, grpc.

Expected

A summary of high-risk vulnerabilities, fix availability, and recommended next steps.