← The evidence ledger
Evidence row 1791854
Observed , by sync.x402_bazaar/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://saylorinnovations.com/api/vuln/check
- Recorded
- Previous row
- #120836
- Body SHA-256
- 9c663a9b15c23c0ebed6f7177071e5e18e45df8915f53641e96450f3ceb3abf8
- Leaf
- 0x946c639d628a60e63c22769d8959cd5f3bde2bf89bd4bc74c3c7eec61a1f1656
What was observed
{
"endpoints": [
[
"x402",
"https://saylorinnovations.com/api/vuln/check"
]
],
"name": "Saylor Innovations Dependency Se",
"owner_address": "0xa2a8df0f7caabea4e120a2568118f141569fc8aa",
"raw": {
"accepts": [
{
"amount": "10000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:vuln:check",
"name": "USD Coin",
"note": "Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:8453",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:vuln:check",
"name": "USD Coin",
"note": "Polygon settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:137",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:vuln:check",
"name": "USD Coin",
"note": "Arbitrum settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:42161",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb",
"memo": "saylor:vuln:check",
"reference": "ECCak47Druc5TPFTwgoU8ktfJzHT9YzsbG7ZD8g9QafM",
"session": "eyJhcnRpY2xlSWQiOiJ2dWxuOmNoZWNrIiwicmVmZXJlbmNlIjoiRUNDYWs0N0RydWM1VFBGVHdnb1U4a3RmSnpIVDlZenNiRzdaRDhnOVFhZk0iLCJyZWNpcGllbnQiOiI3TFNqZnJKZjhmTnNCOFZBOXU3TjNXRW4yNXNtUUxwb2IzU3Z5VXZYYWN5NyIsIm1pbnQiOiJFUGpGV2RkNUF1ZnFTU3FlTTJxTjF4enliYXBDOEc0d0VHR2tad3lURHQxdiIsIm1pbkFtb3VudCI6MTAwMDAsImV4cCI6MTc5MjQ3ODMxMjIxMn0.DT3p9_t6ZbwTQU8OcCrD54iNae50bloK213sep6F-Zc"
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB",
"extra": {
"feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb",
"memo": "saylor:vuln:check",
"reference": "9PJeLFysnSF5z41TukPUBtvqFjV6arUNrLBggUYTbcrK",
"session": "eyJhcnRpY2xlSWQiOiJ2dWxuOmNoZWNrIiwicmVmZXJlbmNlIjoiOVBKZUxGeXNuU0Y1ejQxVHVrUFVCdHZxRmpWNmFyVU5yTEJnZ1VZVGJjcksiLCJyZWNpcGllbnQiOiI3TFNqZnJKZjhmTnNCOFZBOXU3TjNXRW4yNXNtUUxwb2IzU3Z5VXZYYWN5NyIsIm1pbnQiOiJFczl2TUZyemFDRVJtSmZyRjRIMkZZRDRLQ29Oa1kxMU1jQ2U4QmVud05ZQiIsIm1pbkFtb3VudCI6MTAwMDAsImV4cCI6MTc5MjQ3ODMxMjIxMn0.KsX9UVFnRtFZGkSRd1gEMji1NS3WQRz0ykwAJx0URGk"
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
},
{
"amount": "92742",
"asset": "So11111111111111111111111111111111111111112",
"extra": {
"memo": "saylor:vuln:check",
"native": true,
"note": "Native SOL: send lamports with a system transfer, not an SPL transfer. Price is quoted live and this quote expires in 120s.",
"quotedLamports": "95611",
"reference": "9q8iQG3znKBAi2KcdbwHWJRrsbggt8fVM185sF8fHjjA",
"session": "eyJhcnRpY2xlSWQiOiJ2dWxuOmNoZWNrIiwicmVmZXJlbmNlIjoiOXE4aVFHM3puS0JBaTJLY2Rid0hXSlJyc2JnZ3Q4ZlZNMTg1c0Y4ZkhqakEiLCJyZWNpcGllbnQiOiI3TFNqZnJKZjhmTnNCOFZBOXU3TjNXRW4yNXNtUUxwb2IzU3Z5VXZYYWN5NyIsIm1pbnQiOm51bGwsIm1pbkFtb3VudCI6OTI3NDIsImV4cCI6MTc5MjQ3ODMxMjIxMn0.uLrlU4A2055jNvbY1zC5piifl4jY787u1oikqHFPmfg",
"solUsdPrice": 104.59
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
}
],
"description": "Known vulnerabilities for a package version (OSV) - CVE aliases, severity and fixed-in version",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"ecosystem": "npm",
"name": "lodash",
"version": "4.17.15"
},
"type": "http"
},
"output": {
"example": {
"count": 6,
"ecosystem": "npm",
"highest_severity": "HIGH",
"name": "lodash",
"recommended_upgrade": "4.17.21",
"verdict": "upgrade now to 4.17.21",
"version": "4.17.15",
"vulnerabilities": [
{
"aliases": [
"CVE-2021-23337"
],
"fixed_in": [
"4.17.21"
],
"id": "GHSA-35jh-r3h4-6jhm",
"severity": "HIGH",
"summary": "Command Injection in lodash"
}
],
"vulnerable": true
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"ecosystem": {
"description": "npm | pypi | crates | go | maven | nuget | rubygems | packagist | pub | hex (query)",
"type": "string"
},
"name": {
"description": "package name (query)",
"type": "string"
},
"version": {
"description": "installed version (query)",
"type": "string"
}
},
"required": [
"ecosystem",
"name",
"version"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"checked_at": {
"description": "Time the check was run (UTC)",
"type": [
"string",
"null"
]
},
"count": {
"description": "Number of items returned",
"type": [
"number",
"null"
]
},
"ecosystem": {
"description": "Package ecosystem the record belongs to",
"type": [
"string",
"null"
]
},
"highest_severity": {
"description": "Highest severity",
"type": [
"string",
"null"
]
},
"name": {
"description": "Name",
"type": "string"
},
"recommended_upgrade": {
"description": "Recommended upgrade",
"type": [
"string",
"null"
]
},
"source": {
"description": "Data source the values come from",
"type": [
"string",
"null"
]
},
"verdict": {
"description": "Overall assessment derived from the listed reasons",
"type": [
"string",
"null"
]
},
"version": {
"description": "Version identifier",
"type": "string"
},
"vulnerabilities": {
"description": "Known vulnerabilities",
"items": {
"type": "object"
},
"type": "array"
},
"vulnerable": {
"description": "True when known vulnerabilities apply",
"type": "boolean"
}
},
"required": [
"name",
"version",
"vulnerable",
"vulnerabilities"
],
"type": "object"
},
"type": {
"const": "json",
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1790235422/bazaar-icons/bc5e2b3d111ebbef.jpg",
"lastUpdated": "2026-10-20T06:36:32.259Z",
"quality": {
"l30DaysTotalCalls": 2,
"l30DaysUniquePayers": 2,
"lastCalledAt": "2026-10-20T06:36:31.996Z"
},
"resource": "https://saylorinnovations.com/api/vuln/check",
"serviceName": "Saylor Innovations Dependency Se",
"tags": [
"security",
"vulnerabilities",
"dependencies",
"osv",
"cve"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Known vulnerabilities for a package version (OSV) - CVE aliases, severity and fixed-in version"
}What the leaf hashes
{"body":"9c663a9b15c23c0ebed6f7177071e5e18e45df8915f53641e96450f3ceb3abf8","id":1791854,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793559995670411,"prev":120836,"subject":"x402_bazaar:https://saylorinnovations.com/api/vuln/check","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (302406 rows).
- 0x946c7e25e43c1721309c10b3c1c3780d72165cf01608a41079e3f86f79a22361
- 0x589ecc1bdc3b342157825f94b91992d13d580b5f404522500e0df0053adcaecf
- 0x4b35f4fa5bfb4518be5a4b55fbeaf5213848c7ac61d6e54795ffde009d7cf9b1
- 0xb533135db1801d4304d72334834032b295e4c8bdb6a4bdb31c775984dda8f55d
- 0xd72c68d99656db335c251af01a1d82f92a23fbe0c956855ce8983a4e6210266d
- 0x101786a3fcbc94ca7a99d903ce0e0c4dcda4bf535ab345e82805c51c9200465e
- 0x5001a5e62d9028727d524250bcca33cf40cae5845df23c7043b649c35e4006cb
- 0x07033ad1f810f002a344a57ccaf4e3726ffcc37ab2c47ca08a1e3f4d2e01954e
- 0xf9b1b3f67ed74900ae0f066a492fa37bffe77449494921f21418651a4e0e2070
- 0x80cef9e6dd6b595781c47f8450a21a9048b9b6ccac7743777b711fa2d32c8994
- 0x95dadcf28dd6c836eaa0bfa310ce063b8172b6be8890ec46a40a2e4782344a3c
- 0xdb148eb60781e84f89f87ace74a3e8f47c948c4e56e13425389af0e69273c56e
- 0x73357a003686b5a36e79c0627c363287b3b4b7b05650c5c5ef61e2fe0f8fb20e
- 0x4a947b63bd24ff0fe59b3ababead63ec46e4f0a77216d7b01b8bdbc5c7c01e63
- 0x23107b06227fe01d939429fa5248f5555093c421dfc6b8bc6ba3518a65263d17
- 0xc2b1c84ef3531511a3d8d9db5ff9eeca2725a3782e7f9c4ac87fc0f1588349fa
- 0x0c618c42b286ad61acd8204aa6dcf024b8b041d3759aa585bf4e221abc39cb5d
- 0x6142ac48fda269c17791c79da99c2456ac6acfe98268f4d168a404fd6040c703
- 0x3315fd2757fdd435852cc277377234a3f3909a6d2a089d0e36f6d59aacfda910
- Day root
- 0x7fa2cba1cf3d6b35630896f5fe1a650adb307ea2c376e80a5f2d9276b7cb5ab3
- Chained
- 0x577ff89ba012beeff3197bcff7fa86752074bdf54205a24359cc437be2a952a4
- Published
- On Arc Testnet, block 70262758: 0x435bc1b9331471d72e1998f2e420983b5189d4da65ffbd6f27ef40daf5e1ea90