← The evidence ledger
Evidence row 120837
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://saylorinnovations.com/api/vuln/cve
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- b137c4ce5e2071eb91ab0eaf6c9a9e599e287e811fabe0b2e6248dbd3ec8b0ea
- Leaf
- 0x481d4aa6a3ba9d4ab2009443470af8c9fbb0ead337bdc95d6b4239ec896b0a23
What was observed
{
"endpoints": [
[
"x402",
"https://saylorinnovations.com/api/vuln/cve"
]
],
"name": "Saylor Innovations Vulnerability",
"owner_address": "0xa2a8df0f7caabea4e120a2568118f141569fc8aa",
"raw": {
"accepts": [
{
"amount": "10000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:vuln:cve",
"name": "USD Coin",
"note": "Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:8453",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:vuln:cve",
"name": "USD Coin",
"note": "Polygon settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:137",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:vuln:cve",
"name": "USD Coin",
"note": "Arbitrum settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:42161",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb",
"memo": "saylor:vuln:cve",
"reference": "6B6dCpZYC97zqor9aEA3D6iRyi49RtnfWkfwyHhsMPjd",
"session": "eyJhcnRpY2xlSWQiOiJ2dWxuOmN2ZSIsInJlZmVyZW5jZSI6IjZCNmRDcFpZQzk3enFvcjlhRUEzRDZpUnlpNDlSdG5mV2tmd3lIaHNNUGpkIiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjoiRVBqRldkZDVBdWZxU1NxZU0ycU4xeHp5YmFwQzhHNHdFR0drWnd5VER0MXYiLCJtaW5BbW91bnQiOjEwMDAwLCJleHAiOjE3OTI0NzgzMTM3NzR9.kKkqKWBZUJ8_o1VmAWL_YgQ41k84oVrXK4DpaoRdCgE"
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB",
"extra": {
"feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb",
"memo": "saylor:vuln:cve",
"reference": "HsUpGxw2JiDdgxymp2rwfsftJqR1T2tFFUepY65APJNi",
"session": "eyJhcnRpY2xlSWQiOiJ2dWxuOmN2ZSIsInJlZmVyZW5jZSI6IkhzVXBHeHcySmlEZGd4eW1wMnJ3ZnNmdEpxUjFUMnRGRlVlcFk2NUFQSk5pIiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjoiRXM5dk1GcnphQ0VSbUpmckY0SDJGWUQ0S0NvTmtZMTFNY0NlOEJlbndOWUIiLCJtaW5BbW91bnQiOjEwMDAwLCJleHAiOjE3OTI0NzgzMTM3NzR9.ozEtvyFz5RDstsYPJ-CJwsfaxXREn8s19XgBw65sl0I"
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
},
{
"amount": "92742",
"asset": "So11111111111111111111111111111111111111112",
"extra": {
"memo": "saylor:vuln:cve",
"native": true,
"note": "Native SOL: send lamports with a system transfer, not an SPL transfer. Price is quoted live and this quote expires in 120s.",
"quotedLamports": "95611",
"reference": "ACfoK3u46vmCDUMTQrvum8xim5pdLaEBEgygFjnNStRV",
"session": "eyJhcnRpY2xlSWQiOiJ2dWxuOmN2ZSIsInJlZmVyZW5jZSI6IkFDZm9LM3U0NnZtQ0RVTVRRcnZ1bTh4aW01cGRMYUVCRWd5Z0Zqbk5TdFJWIiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjpudWxsLCJtaW5BbW91bnQiOjkyNzQyLCJleHAiOjE3OTI0NzgzMTM3NzR9.ooZ279FSv_YH4gieQwWijuY446GN3v-Da-Pi7H9-RUI",
"solUsdPrice": 104.59
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
}
],
"description": "CVE details - CVSS, CISA KEV status, EPSS exploit probability, affected packages and patch priority",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"id": "CVE-2021-44228"
},
"type": "http"
},
"output": {
"example": {
"cvss": {
"score": 10,
"severity": "CRITICAL",
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"cwes": [
"CWE-502",
"CWE-400",
"CWE-20"
],
"exploitation": {
"epss": {
"percentile": 1,
"probability_30d": 0.99999
},
"kev": {
"added": "2021-12-10",
"ransomware_use": true
},
"known_exploited": true
},
"found": true,
"id": "CVE-2021-44228",
"packages": [
{
"ecosystem": "Maven",
"fixed_in": [
"2.15.0"
],
"name": "org.apache.logging.log4j:log4j-core"
}
],
"priority": "patch now",
"state": "PUBLISHED",
"title": "Apache Log4j2 JNDI features do not protect against attacker controlled LDAP"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"id": {
"description": "CVE id, e.g. CVE-2021-44228 (query)",
"type": "string"
}
},
"required": [
"id"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"affected": {
"type": [
"array",
"null"
]
},
"assigner": {
"type": [
"string",
"null"
]
},
"checked_at": {
"description": "Time the check was run (UTC)",
"type": [
"string",
"null"
]
},
"cvss": {
"type": [
"object",
"null"
]
},
"cwes": {
"type": [
"array",
"null"
]
},
"description": {
"description": "Short description",
"type": [
"string",
"null"
]
},
"exploitation": {
"type": "object"
},
"found": {
"description": "True when the lookup matched a record",
"type": "boolean"
},
"id": {
"description": "Identifier of the record",
"type": "string"
},
"nvd_cvss": {
"description": "Nvd cvss"
},
"packages": {
"description": "Packages",
"items": {
"type": "object"
},
"type": "array"
},
"priority": {
"type": "string"
},
"published": {
"description": "Publication date",
"type": [
"string",
"null"
]
},
"references": {
"type": [
"array",
"null"
]
},
"sources_failed": {
"description": "Data sources that did not answer; empty when all answered",
"type": [
"array",
"null"
]
},
"state": {
"description": "State or region",
"type": [
"string",
"null"
]
},
"title": {
"description": "Title",
"type": [
"string",
"null"
]
},
"updated": {
"description": "Time the record was last updated",
"type": [
"string",
"null"
]
}
},
"required": [
"id",
"found"
],
"type": "object"
},
"type": {
"const": "json",
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1790235422/bazaar-icons/bc5e2b3d111ebbef.jpg",
"lastUpdated": "2026-10-20T06:36:33.816Z",
"quality": {
"l30DaysTotalCalls": 3,
"l30DaysUniquePayers": 3,
"lastCalledAt": "2026-10-20T06:36:33.615Z"
},
"resource": "https://saylorinnovations.com/api/vuln/cve",
"serviceName": "Saylor Innovations Vulnerability",
"tags": [
"security",
"vulnerabilities",
"dependencies",
"osv",
"cve"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "CVE details - CVSS, CISA KEV status, EPSS exploit probability, affected packages and patch priority"
}What the leaf hashes
{"body":"b137c4ce5e2071eb91ab0eaf6c9a9e599e287e811fabe0b2e6248dbd3ec8b0ea","id":120837,"kind":"listing","method":"baseline/1","observed_us":1793025618882130,"prev":null,"subject":"x402_bazaar:https://saylorinnovations.com/api/vuln/cve","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x481e29c48bc961bfb77ddcf01b45596a74b6a920eb9b3c6fa4dc1a5fea84fdfe
- 0x28e0d3d9cc2b8d33971175a41c14767260da551601ac7346df938602762d72c2
- 0xa1d66b0a97f849cab1f51368cd5d16e61599082d7cca490c5b8573f1516ddc38
- 0x78e12114fa09267df9166836b6a6b0c7a7e4642567e4728ed4162f1deaf6d91b
- 0xd682536c7d7b3bdf068334f82266bb29541443e64f528db42a145fe0c30902d3
- 0x814b0b0e0a0771a4a1a6a74e3e22fd7f52e765afc6e634fd745764fc891fe04e
- 0xf981542795ae44bb9bd951a1c04a7ae9d16d046a232f3f83007958a367c506b7
- 0x09243960b6fb12adb2b9777ec865051f709d8597268e76d6e6be2ed517bd4a28
- 0x05b1039a17106fb29c4d401d351479266f6fc8430163a1241003f014cab63ef1
- 0xf4b95fd1e38a0e446e53bae758e7de53bd44782a0b605a04a7f0a7164ac1df79
- 0x698f6ba6ffdd19057a2337a8eb71a612a58ea57160b0993c65313b7a3f2a2956
- 0xae3550e71ca4b0f0b86c9905b234388d6bc01a22e52324fb1ee62a553273a1fe
- 0xb86fa861d04737cb507e721eefbb066d26528fdb6017b1145c18d1223b93ee21
- 0x88e326a39b26e2c125306c9d3805d14398ace088bba9a2a0aa376b811cfb201a
- 0x2be1e80e065dd6b2cc75a7142be22225acd144ac975d70bf24b4f01fd76dc497
- 0x2e6a32eb32761c210560e852405e2f865f958ddbe01027894f8b9c1b3433b9f0
- 0x9a83be955a206deb65b995adfd92c58fa31c95fbbf926bd199d300e70b08b26d
- 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae