{"sample":true,"route":"/check/infra","method":"GET","priceUsd":0.015,"request":"https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/check/infra?ip=1.1.1.1&cve=CVE-2021-44228&package=npm%3Alodash%404.17.15&software=python%403.8.10","response":{"query":{"ip":"1.1.1.1","cve":"CVE-2021-44228","package":"npm:lodash@4.17.15","software":"python@3.8.10"},"summary":{"flags":["kev_listed","kev_ransomware_use","cvss_critical","vulnerable_package","eol"],"sections":{"ip":"ok","cve":"ok","package":"ok","software":"ok"},"complete":true},"ip":{"status":"ok","ip":"1.1.1.1","version":4,"asn":13335,"as_name":"CLOUDFLARENET","country":"US","tor_exit":{"listed":false,"list_date":"2026-10-25T09:05:04Z"},"cloud":{"provider":"cloudflare","provider_name":"Cloudflare","cidr":"1.1.1.0/24"},"source":"iptoasn.com IP-to-ASN + Tor Project exit list + cloud IP ranges","source_url":"https://iptoasn.com/","as_of":"2026-10-25T09:21:20.000Z","attribution":["iptoasn.com data: Public Domain (PDDL v1.0)","Tor Project data: CC0"]},"cve":{"status":"ok","id":"CVE-2021-44228","cvss":{"version":"3.1","base_score":10,"severity":"CRITICAL","provider":"NVD"},"severity":"CRITICAL","epss":{"score":0.99999,"percentile":1,"date":"2026-10-24"},"kev":{"listed":true,"date_added":"2021-12-10","due_date":"2021-12-24","known_ransomware_use":"Known","vendor":"Apache","product":"Log4j2"},"source":"CVE.org + NVD + FIRST EPSS + CISA KEV","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-44228","as_of":"2026-10-25T09:00:00.000Z","attribution":"CISA Known Exploited Vulnerabilities Catalog, CC0 1.0; not an endorsement by CISA or DHS."},"package":{"status":"ok","ecosystem":"npm","name":"lodash","version":"4.17.15","vulnerable":true,"record_count":2,"max_severity":"HIGH","malicious_reports":0,"vulnerabilities":[{"id":"GHSA-35jh-r3h4-6jhm","aliases":["CVE-2021-23337"],"summary":"Command Injection in lodash","severity":"HIGH","fixed_in":["4.17.21"],"license":"CC-BY-4.0"}],"returned":1,"truncated":true,"source":"OSV.dev","source_url":"https://osv.dev/list?ecosystem=npm&q=lodash","as_of":"2026-10-25T09:00:00.000Z","attribution":"Vulnerability records from OSV.dev (https://osv.dev), per-record licences as shown."},"software":{"status":"ok","product":"python","version":"3.8.10","matched_cycle":"3.8","supported":false,"release":{"cycle":"3.8","is_eol":true,"eol_date":"2024-10-07","days_until_eol":-383,"supported":false},"newest_cycle":"3.15","source":"endoflife.date API v1","source_url":"https://endoflife.date/python","as_of":"2026-10-25T09:00:00.000Z","attribution":"endoflife.date, MIT licence."},"as_of":"2026-10-25T09:21:30.000Z","note":"Facts as each named source published them at the section's as_of time; flags are derived only from those fields and are not remediation advice or a security verdict."},"note":"Free sample: the answer shape and fields for the fixed example input in 'request'. Values are an example and may not be current data; a paid call returns live data for your own input.","buy":"Call https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/check/infra with an x402 or MPP client: the unpaid call answers HTTP 402 with the exact price; the paid call returns the data with a receipt. Other ways to pay: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/pay"}