← The evidence ledger
Evidence row 120836
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://saylorinnovations.com/api/vuln/check
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- f01c91c858b7f1d4f059982bdbe04e9d186eb0a75d183f78f4573ab751f98cba
- Leaf
- 0x6dd6f156886bac5b2ae074d464d7e052045b55d770382f1202f6f20a800a144b
What was observed
{
"endpoints": [
[
"x402",
"https://saylorinnovations.com/api/vuln/check"
]
],
"name": "Saylor Innovations Dependency Se",
"owner_address": "0xa2a8df0f7caabea4e120a2568118f141569fc8aa",
"raw": {
"accepts": [
{
"amount": "10000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:vuln:check",
"name": "USD Coin",
"note": "Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:8453",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:vuln:check",
"name": "USD Coin",
"note": "Polygon settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:137",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:vuln:check",
"name": "USD Coin",
"note": "Arbitrum settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:42161",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb",
"memo": "saylor:vuln:check",
"reference": "ECCak47Druc5TPFTwgoU8ktfJzHT9YzsbG7ZD8g9QafM",
"session": "eyJhcnRpY2xlSWQiOiJ2dWxuOmNoZWNrIiwicmVmZXJlbmNlIjoiRUNDYWs0N0RydWM1VFBGVHdnb1U4a3RmSnpIVDlZenNiRzdaRDhnOVFhZk0iLCJyZWNpcGllbnQiOiI3TFNqZnJKZjhmTnNCOFZBOXU3TjNXRW4yNXNtUUxwb2IzU3Z5VXZYYWN5NyIsIm1pbnQiOiJFUGpGV2RkNUF1ZnFTU3FlTTJxTjF4enliYXBDOEc0d0VHR2tad3lURHQxdiIsIm1pbkFtb3VudCI6MTAwMDAsImV4cCI6MTc5MjQ3ODMxMjIxMn0.DT3p9_t6ZbwTQU8OcCrD54iNae50bloK213sep6F-Zc"
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB",
"extra": {
"feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb",
"memo": "saylor:vuln:check",
"reference": "9PJeLFysnSF5z41TukPUBtvqFjV6arUNrLBggUYTbcrK",
"session": "eyJhcnRpY2xlSWQiOiJ2dWxuOmNoZWNrIiwicmVmZXJlbmNlIjoiOVBKZUxGeXNuU0Y1ejQxVHVrUFVCdHZxRmpWNmFyVU5yTEJnZ1VZVGJjcksiLCJyZWNpcGllbnQiOiI3TFNqZnJKZjhmTnNCOFZBOXU3TjNXRW4yNXNtUUxwb2IzU3Z5VXZYYWN5NyIsIm1pbnQiOiJFczl2TUZyemFDRVJtSmZyRjRIMkZZRDRLQ29Oa1kxMU1jQ2U4QmVud05ZQiIsIm1pbkFtb3VudCI6MTAwMDAsImV4cCI6MTc5MjQ3ODMxMjIxMn0.KsX9UVFnRtFZGkSRd1gEMji1NS3WQRz0ykwAJx0URGk"
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
},
{
"amount": "92742",
"asset": "So11111111111111111111111111111111111111112",
"extra": {
"memo": "saylor:vuln:check",
"native": true,
"note": "Native SOL: send lamports with a system transfer, not an SPL transfer. Price is quoted live and this quote expires in 120s.",
"quotedLamports": "95611",
"reference": "9q8iQG3znKBAi2KcdbwHWJRrsbggt8fVM185sF8fHjjA",
"session": "eyJhcnRpY2xlSWQiOiJ2dWxuOmNoZWNrIiwicmVmZXJlbmNlIjoiOXE4aVFHM3puS0JBaTJLY2Rid0hXSlJyc2JnZ3Q4ZlZNMTg1c0Y4ZkhqakEiLCJyZWNpcGllbnQiOiI3TFNqZnJKZjhmTnNCOFZBOXU3TjNXRW4yNXNtUUxwb2IzU3Z5VXZYYWN5NyIsIm1pbnQiOm51bGwsIm1pbkFtb3VudCI6OTI3NDIsImV4cCI6MTc5MjQ3ODMxMjIxMn0.uLrlU4A2055jNvbY1zC5piifl4jY787u1oikqHFPmfg",
"solUsdPrice": 104.59
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
}
],
"description": "Known vulnerabilities for a package version (OSV) - CVE aliases, severity and fixed-in version",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"ecosystem": "npm",
"name": "lodash",
"version": "4.17.15"
},
"type": "http"
},
"output": {
"example": {
"count": 6,
"ecosystem": "npm",
"highest_severity": "HIGH",
"name": "lodash",
"recommended_upgrade": "4.17.21",
"verdict": "upgrade now to 4.17.21",
"version": "4.17.15",
"vulnerabilities": [
{
"aliases": [
"CVE-2021-23337"
],
"fixed_in": [
"4.17.21"
],
"id": "GHSA-35jh-r3h4-6jhm",
"severity": "HIGH",
"summary": "Command Injection in lodash"
}
],
"vulnerable": true
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"ecosystem": {
"description": "npm | pypi | crates | go | maven | nuget | rubygems | packagist | pub | hex (query)",
"type": "string"
},
"name": {
"description": "package name (query)",
"type": "string"
},
"version": {
"description": "installed version (query)",
"type": "string"
}
},
"required": [
"ecosystem",
"name",
"version"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"checked_at": {
"description": "Time the check was run (UTC)",
"type": [
"string",
"null"
]
},
"count": {
"description": "Number of items returned",
"type": [
"number",
"null"
]
},
"ecosystem": {
"description": "Package ecosystem the record belongs to",
"type": [
"string",
"null"
]
},
"highest_severity": {
"description": "Highest severity",
"type": [
"string",
"null"
]
},
"name": {
"description": "Name",
"type": "string"
},
"recommended_upgrade": {
"description": "Recommended upgrade",
"type": [
"string",
"null"
]
},
"source": {
"description": "Data source the values come from",
"type": [
"string",
"null"
]
},
"verdict": {
"description": "Overall assessment derived from the listed reasons",
"type": [
"string",
"null"
]
},
"version": {
"description": "Version identifier",
"type": "string"
},
"vulnerabilities": {
"description": "Known vulnerabilities",
"items": {
"type": "object"
},
"type": "array"
},
"vulnerable": {
"description": "True when known vulnerabilities apply",
"type": "boolean"
}
},
"required": [
"name",
"version",
"vulnerable",
"vulnerabilities"
],
"type": "object"
},
"type": {
"const": "json",
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1790235422/bazaar-icons/bc5e2b3d111ebbef.jpg",
"lastUpdated": "2026-10-20T06:36:32.259Z",
"quality": {
"l30DaysTotalCalls": 3,
"l30DaysUniquePayers": 3,
"lastCalledAt": "2026-10-20T06:36:31.996Z"
},
"resource": "https://saylorinnovations.com/api/vuln/check",
"serviceName": "Saylor Innovations Dependency Se",
"tags": [
"security",
"vulnerabilities",
"dependencies",
"osv",
"cve"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Known vulnerabilities for a package version (OSV) - CVE aliases, severity and fixed-in version"
}What the leaf hashes
{"body":"f01c91c858b7f1d4f059982bdbe04e9d186eb0a75d183f78f4573ab751f98cba","id":120836,"kind":"listing","method":"baseline/1","observed_us":1793025618879981,"prev":null,"subject":"x402_bazaar:https://saylorinnovations.com/api/vuln/check","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x6dd6fc4d21e47f7561791140f958db22cb06ca469350ef27c8cb593db3d1fb24
- 0x6f191c7873156ac8cc3f4c7bfeb6058b1094b664f1ceddd117dde1a570fc2e4d
- 0xd39593b02c962974552e2d1114cba69cf4d1f141b2229dfcdeeef64725a76af8
- 0x300328900c958783dd6d0814bf74a828b628a949fc8bd4ad506cefe63df20b27
- 0x807d7e77d37c2c819a9b02ba0f579d3c07042e6bdfa6252ed6de381b0db598b5
- 0x2738b261163d63390ec62364029b47147f2b6aa026e6c8e322cc243b110c2c0d
- 0xa81751d7391b808d956a41617e74ca50afc1507edb346bb2fc2f5a206363ca38
- 0xa44eba31de733e449d539323c7ccd5d88c9d308517126cab986a7c7452c440ab
- 0x6adb3bcab707006cadbe14e2119898c9ee7b51117b9aa82e38b5e0fb04bcac8d
- 0xf5aa2bc3e76b3f95fd71f83b9a054df718f7d0a19b90288120c902f644e9e605
- 0x3167834b22bda59442a4af0440d698d3a42612c3d6ce4e293e0fa97975320c38
- 0x134f9b6d26973548d1c789e6b61a12b25e2a5a8fb632e692cd20a1b08d766a1b
- 0x14b83e3bc6587240f31cd033d09d131e0775b7b00aada9042597008a70399013
- 0xfc9b5a81a7a83a1c735a4fe64590beb9db14d2366f463161358af28c3ea9a81d
- 0xa2d436d488e3600b0e5c3e3ed9c9234cd52853c59830b786334fd0c4292d9f40
- 0x47b89901b0f07938a6b9a66ddf35683903f79d756a7c7763665fd632758b08d0
- 0x9a83be955a206deb65b995adfd92c58fa31c95fbbf926bd199d300e70b08b26d
- 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae