{"api":"v1","generated_at":"2026-10-07T15:10:42.884Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/audit-152-53-82-29-sslip-io-v1-vulns-b06780","pinned_page":"https://tollindex.com/e/audit-152-53-82-29-sslip-io-v1-vulns-b06780/at/2026-10-07T13-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-10-07T13:20:05.954Z","snapshot_stamp":"2026-10-07T13-20Z","endpoint":{"slug":"audit-152-53-82-29-sslip-io-v1-vulns-b06780","canonical_url":"https://audit.152-53-82-29.sslip.io/v1/vulns","resource":"https://audit.152-53-82-29.sslip.io/v1/vulns","http_method":"POST","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Known vulnerabilities for a list of dependencies, npm and PyPI, in one call. Send {\"npm\":[\"lodash@4.17.20\"],\"pypi\":[\"django==3.2.0\"]} or a package.json or requirements.txt, up to 50 packages. Returns only packages that have advisories: OSV and GHSA ids, CVE aliases, severity, summary, and the first fixed version, plus counts. Unpinned packages are checked at their latest version. Deterministic OSV data, no LLM.","service_name":"manifest-audit","declared_category":null,"declared_tags":["vulnerabilities","cve","osv","security","sca"],"route_template":null,"registry_updated":"2026-10-06T07:31:16.497Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"vulns","category":"inference","first_observed_by_toll":"2026-09-23T04:43:35.820Z","last_observed_by_toll":"2026-10-07T13:20:05.954Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-23T04:43:35.820Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.005 USDC","amount_units":0.005,"decimals_known":true,"pay_to":"0x9Ea52806dB0b25a8130D2b210D5336eC1DCFBa0e","scheme":"exact"},{"registry":"cdp","ordinal":1,"network":"eip155:137","asset":"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.005 USDC","amount_units":0.005,"decimals_known":true,"pay_to":"0x9Ea52806dB0b25a8130D2b210D5336eC1DCFBa0e","scheme":"exact"},{"registry":"cdp","ordinal":2,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","asset_name":null,"symbol":"USDC","decimals":6,"amount_display":"0.005 USDC","amount_units":0.005,"decimals_known":true,"pay_to":"EtmTq4WoUyKvh5aPpB4xXNDRQDQmPSYBzLGLKJprZHHd","scheme":"exact"}],"counters":{"observed_at":"2026-10-07T13:20:05.954Z","calls_30d":3,"unique_payers_30d":2,"last_called_at":"2026-10-06T07:31:16.068Z"},"validation":{"latest":{"observed_at":"2026-10-07T11:20:47.493Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-10-07"},"uptime":[{"days":7,"observed":7,"passed":7,"ratio":1},{"days":30,"observed":12,"passed":12,"ratio":1},{"days":90,"observed":12,"passed":12,"ratio":1}],"history_90d":[{"observed_at":"2026-10-07T11:20:47.493Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-07","state_changed":false},{"observed_at":"2026-10-06T12:03:01.801Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-06","state_changed":false},{"observed_at":"2026-10-05T10:40:57.673Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-05","state_changed":false},{"observed_at":"2026-10-04T13:32:32.542Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-04","state_changed":false},{"observed_at":"2026-10-03T07:03:44.831Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-03","state_changed":false},{"observed_at":"2026-10-02T16:13:17.788Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-02","state_changed":false},{"observed_at":"2026-10-01T08:59:09.821Z","state":"pass","failed_checks":[],"run_id":"daily-2026-10-01","state_changed":false},{"observed_at":"2026-09-30T08:24:38.323Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-30","state_changed":false},{"observed_at":"2026-09-29T20:33:09.056Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-29","state_changed":false},{"observed_at":"2026-09-28T17:42:48.366Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-28","state_changed":false},{"observed_at":"2026-09-23T07:31:29.047Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-23","state_changed":false},{"observed_at":"2026-09-23T05:10:49.804Z","state":"pass","failed_checks":[],"run_id":"new-after-daily-2026-09-22","state_changed":true}]},"seller":{"wallet":"0x9Ea52806dB0b25a8130D2b210D5336eC1DCFBa0e","page":"https://tollindex.com/seller/0x9Ea52806dB0b25a8130D2b210D5336eC1DCFBa0e","endpoints":6,"hosts":1},"reports":0,"registry_record":{"cdp":[{"tags":["vulnerabilities","cve","osv","security","sca"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x9Ea52806dB0b25a8130D2b210D5336eC1DCFBa0e","amount":"5000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},{"asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"name":"USD Coin","version":"2"},"payTo":"0x9Ea52806dB0b25a8130D2b210D5336eC1DCFBa0e","amount":"5000","scheme":"exact","network":"eip155:137","maxTimeoutSeconds":300},{"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb"},"payTo":"EtmTq4WoUyKvh5aPpB4xXNDRQDQmPSYBzLGLKJprZHHd","amount":"5000","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-10-06T07:31:16.068Z","l30DaysTotalCalls":3,"l30DaysUniquePayers":2},"resource":"https://audit.152-53-82-29.sslip.io/v1/vulns","extensions":{"bazaar":{"info":{"input":{"body":{"npm":["lodash@4.17.20"],"pypi":["django==3.2.0"]},"type":"http","method":"POST","bodyType":"json"},"output":{"type":"json","example":{"rows":[{"name":"django","ecosystem":"pypi","max_severity":"CRITICAL","version_checked":"3.2.0","vulnerabilities":[{"id":"GHSA-2gwj-7jmv-h26r","aliases":["CVE-2023-31047"],"summary":"Django bypass of validation when uploading multiple files","fixed_in":"3.2.19","severity":"CRITICAL"}],"vulnerability_count":63}],"sources":["api.osv.dev","api.deps.dev"],"summary":{"packages":2,"max_severity":"CRITICAL","with_vulnerabilities":1,"total_vulnerabilities":63},"elapsed_ms":900}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","properties":{"npm":{"type":"array","items":{"type":"string"}},"pypi":{"type":"array","items":{"type":"string"}},"manifest":{"type":"string"},"ecosystem":{"enum":["npm","pypi"],"type":"string"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"rows":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"ecosystem":{"type":"string"},"max_severity":{"type":["string","null"]},"version_checked":{"type":["string","null"]},"vulnerabilities":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"aliases":{"type":"array","items":{"type":"string"}},"summary":{"type":"string"},"fixed_in":{"type":["string","null"]},"severity":{"type":"string"}}}},"vulnerability_count":{"type":"integer"}}}},"sources":{"type":"array","items":{"type":"string"}},"summary":{"type":"object","properties":{"packages":{"type":"integer"},"max_severity":{"type":["string","null"]},"with_vulnerabilities":{"type":"integer"},"total_vulnerabilities":{"type":"integer"}}},"elapsed_ms":{"type":"integer"}}}}}}}}},"description":"Known vulnerabilities for a list of dependencies, npm and PyPI, in one call. Send {\"npm\":[\"lodash@4.17.20\"],\"pypi\":[\"django==3.2.0\"]} or a package.json or requirements.txt, up to 50 packages. Returns only packages that have advisories: OSV and GHSA ids, CVE aliases, severity, summary, and the first fixed version, plus counts. Unpinned packages are checked at their latest version. Deterministic OSV data, no LLM.","lastUpdated":"2026-10-06T07:31:16.497Z","serviceName":"manifest-audit","x402Version":2}]}}