← The evidence ledger
Evidence row 67351
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://api.mekler.ai/v1/data/packages/check-version-vulnerabilities
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 528cacb0934fe5a2c02aa931ed5663e28ee1bd45ed17146b304136c2ef316d66
- Leaf
- 0x8272fcce2327c3b2c362f1b74a846d9a41f5020c480e80cdcc75fd9f7a41fce9
What was observed
{
"endpoints": [
[
"x402",
"https://api.mekler.ai/v1/data/packages/check-version-vulnerabilities"
]
],
"name": "Mekler AI",
"owner_address": "0xf6c6e2e530bb311c14a49c1a07c720fc232c07c5",
"raw": {
"accepts": [
{
"amount": "10000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb",
"meklerQuote": "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.d44a39ee1f93b2d5e7161a4d6963d2cf42aa615f1ba22443c29ca0dcb419607a",
"memo": "m:1Eo57h-TstXnFhpNaWPSzw"
},
"maxTimeoutSeconds": 60,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "9mMDrHabSf73MPn1ANdANSmsNw2wKiqE7JZ7eD6EUSRc",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"assetTransferMethod": "eip3009",
"meklerQuote": "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.c1c13899fb1cc5843f00f9b53523f6eef523838089fc00fdd15d4a36a3c4c6eb",
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 60,
"network": "eip155:8453",
"payTo": "0xF6c6E2e530bb311c14a49C1a07C720fc232c07c5",
"scheme": "exact"
}
],
"description": "Check an exact PyPI or npm package version against OSV advisories, group aliases and report affected/fixed version evidence and CISA known exploitation. Preserve source disagreements, withdrawn records, unsupported ranges and dated coverage. No dependency traversal, malware scan, registry existence check or safety guarantee. 0.01 USDC per completed diagnostic; source failures and incomplete pagination are uncharged.",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"ecosystem": "pypi",
"name": "requests",
"request_id": "package-vulnerability-example-001",
"version": "2.19.0"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"advisories": [
{
"fixed_versions_reported": [
"2.20.0"
],
"id": "GHSA-mekl-0000-0001",
"known_exploitation": [
{
"cve": "CVE-2026-99901",
"date_added": "2026-10-20",
"due_date": "2026-11-10",
"ransomware_use": "Unknown"
}
],
"version_status": "affected"
}
],
"coverage": {
"advisory_records": 1,
"kev_catalog_version": "2026.10.20",
"kev_count": 1,
"kev_released_at": "2026-10-20T00:00:00Z",
"kev_source": "https://raw.githubusercontent.com/cisagov/kev-data/main/known_exploited_vulnerabilities.json",
"osv_source": "https://api.osv.dev/v1/query",
"pages": 1,
"query_complete": true,
"withdrawn_records": 0
},
"ecosystem": "pypi",
"limitations": [
"No known matches means no affected version found in this bounded OSV response; unknown, unpublished, missing or newly changed advisories remain possible."
],
"name": "requests",
"observed_at": "2026-10-21T00:00:00Z",
"status": "ok",
"verdict": "affected",
"version": "2.19.0",
"vulnerability_groups": [
{
"advisory_ids": [
"GHSA-mekl-0000-0001"
],
"identifiers": [
"CVE-2026-99901",
"GHSA-mekl-0000-0001"
],
"source_disagreement": false,
"version_status": "affected"
}
],
"withdrawn_advisory_ids": []
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"ecosystem": {
"enum": [
"pypi",
"npm"
],
"type": "string"
},
"name": {
"maxLength": 128,
"type": "string"
},
"request_id": {
"pattern": "^[A-Za-z0-9_-]{16,64}$",
"type": "string"
},
"version": {
"maxLength": 80,
"minLength": 1,
"type": "string"
}
},
"required": [
"ecosystem",
"name",
"version",
"request_id"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"advisories": {
"items": {
"required": [
"id",
"version_status",
"fixed_versions_reported",
"known_exploitation"
],
"type": "object"
},
"maxItems": 100,
"type": "array"
},
"coverage": {
"required": [
"query_complete",
"kev_released_at"
],
"type": "object"
},
"ecosystem": {
"enum": [
"pypi",
"npm"
],
"type": "string"
},
"limitations": {
"items": {
"maxLength": 512,
"type": "string"
},
"maxItems": 5,
"type": "array"
},
"name": {
"maxLength": 128,
"type": "string"
},
"observed_at": {
"maxLength": 80,
"type": "string"
},
"status": {
"const": "ok",
"type": "string"
},
"verdict": {
"enum": [
"affected",
"review_required",
"no_known_matches"
],
"type": "string"
},
"version": {
"maxLength": 80,
"type": "string"
},
"vulnerability_groups": {
"items": {
"required": [
"identifiers",
"version_status",
"source_disagreement"
],
"type": "object"
},
"maxItems": 100,
"type": "array"
},
"withdrawn_advisory_ids": {
"items": {
"maxLength": 160,
"type": "string"
},
"maxItems": 100,
"type": "array"
}
},
"required": [
"status",
"ecosystem",
"name",
"version",
"verdict",
"advisories",
"vulnerability_groups",
"withdrawn_advisory_ids",
"observed_at",
"coverage",
"limitations"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-21T18:12:36.168Z",
"quality": {
"l30DaysTotalCalls": 2,
"l30DaysUniquePayers": 2,
"lastCalledAt": "2026-10-21T18:12:35.734Z"
},
"resource": "https://api.mekler.ai/v1/data/packages/check-version-vulnerabilities",
"serviceName": "Mekler AI",
"tags": [
"data",
"packages",
"vulnerabilities"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Check an exact PyPI or npm package version against OSV advisories, group aliases and report affected/fixed version evidence and CISA known exploitation. Preserve source disagreements, withdrawn records, unsupported ranges and dated coverage. No dependency traversal, malware scan, registry existence check or safety guarantee. 0.01 USDC per completed diagnostic; source failures and incomplete pagination are uncharged."
}What the leaf hashes
{"body":"528cacb0934fe5a2c02aa931ed5663e28ee1bd45ed17146b304136c2ef316d66","id":67351,"kind":"listing","method":"baseline/1","observed_us":1793025462624654,"prev":null,"subject":"x402_bazaar:https://api.mekler.ai/v1/data/packages/check-version-vulnerabilities","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x82730fff36704be06dd1a0199d17b72a4c545829d84251486f3dcaaa4ebb9e5c
- 0xa03e4e2a7bfa0f927f17086f35e1f00d6ab9088ef8f872ea6d510700918b784e
- 0x011239bf7bcbb2c8974ffcecb4a916f74ff76e9b4f2a03073fad04046ac902ff
- 0x8498e29053106682127283f74bd137227f813eff960efe03f163b06961136b27
- 0xe9e1547d6d6e27330cbe98de410425e06344517366cd0d26e6dd9b1fdb5eaf2f
- 0x0f9b1a79219095afae8cac456addfadf0b83e4be456ad6182b946237c830873e
- 0x964ed03e80c0ef9a96af61ef7ed0bb47f1e1e7ee903a2748660b79789aea5e24
- 0x66776c4a4e9622cfce27fb94b8d60259dd34f573b04d7a800ee57efa8f993e1a
- 0x3ffbbd8d309432d0032a93755ada21cc2d60b298f7bd9378566522f8fd2cb5a3
- 0x68b9c13007eacffd2dc146b099ac237e3cce9c995bb23c895d088539fb9a0df0
- 0xc99774cfa2126cb7b4c49d6b3fd2510795689e2dec7886bdb1a009218327ef2e
- 0x08155d70132f82e370214fc5b72194dfa6f5e57670b7bcf74776e8418302897e
- 0x4d2ee986a690e903126f449b4e9e62d5572b350357ab4496a83488949b131c29
- 0x0eff463856b0992d53ab7d8c0b97c71541413358bdd445710c1e4b6aeb4d8f78
- 0x7eb603d37f0f22dae1ea013e391889906ffc0139ff26e25b044bee38eec8f9b2
- 0x2b6e23e3624a1b66e1d2298cfbce99a93ce6b13d24a58112a71802d79c5f7a76
- 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
- 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae