MCP server

OSV Advisories

io.github.basitalisandhu/mcp-osv-advisories

Checked 26 Oct 2026, 08:31 UTC · Checked against OSV.dev for malware and vulnerabilities; never run by us

Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.

Runs on your computer

Website Source

At a glance

Type: MCP server
Publisher: Not verified
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add mcp-osv-advisories -- docker run -i --rm ghcr.io/basitalisandhu/mcp-osv-advisories:0.2.2

Claude Desktop

{"mcpServers":{"mcp-osv-advisories":{"command":"docker","args":["run","-i","--rm","ghcr.io/basitalisandhu/mcp-osv-advisories:0.2.2"]}}}

Codex (config.toml)

[mcp_servers.mcp-osv-advisories]
command = "docker"
args = ["run","-i","--rm","ghcr.io/basitalisandhu/mcp-osv-advisories:0.2.2"]

Gemini CLI

{"mcpServers":{"mcp-osv-advisories":{"command":"docker","args":["run","-i","--rm","ghcr.io/basitalisandhu/mcp-osv-advisories:0.2.2"]}}}

Cursor

{"mcpServers":{"mcp-osv-advisories":{"command":"docker","args":["run","-i","--rm","ghcr.io/basitalisandhu/mcp-osv-advisories:0.2.2"]}}}

VS Code

{"servers":{"mcp-osv-advisories":{"type":"stdio","command":"docker","args":["run","-i","--rm","ghcr.io/basitalisandhu/mcp-osv-advisories:0.2.2"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

Related MCP servers

Devstack
Dev-registry data: npm/PyPI/Docker/VS Code packages, dep graphs, vulns, 50+ ecosystems.
MCPFax Dev Package Intelligence
Is this dependency current, licensed, deprecated, or already carrying a CVE?
PkgGuard
Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker
ScorpTech x402 API
112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups
A.U.G.U.R Foresight · Wallets & Risk
Pre-trade safety + wallets: Solana/EVM token risk, honeypots, counterparties, balances, txs, CVEs.
DepScout
Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
Osv
OSV.dev (Open Source Vulnerabilities) MCP.
Lazaretto
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.basitalisandhu/mcp-osv-advisories.svg)](https://aptlynx.net/servers/io.github.basitalisandhu/mcp-osv-advisories)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents