Check a Package Version
Check [package] version [version] in ecosystem [ecosystem] for known OSV vulnerabilities.
osv
OSV AI Employee
Leina connects to OSV to help you check package versions and explain vulnerability ranges. Ask in your team chat. Leina does the work and brings back the result.
Connect OSV, choose what to share, and hand off your first task.
Leina + OSV Example Result
You
Check npm package demo-parser version 1.2.0 in OSV. Explain any affected range and the fixed version recorded in the result.
Leina
Version 1.2.0 falls inside the affected range. The advisory lists 1.2.3 as the fixed version.
Vulnerability review
demo-parser 1.2.0 · Advisory review
One advisory places version 1.2.0 between the introduced and fixed versions.
- DEMO-2026-001
- Unbounded nesting can exhaust parser resources. Package: demo-parser; ecosystem: npm.
- Affected versions
- Introduced: 1.0.0; fixed: 1.2.3. Version 1.2.0 is within this range.
What Is a OSV AI Agent?
AI queries OSV for the package and version you specify, then explains returned advisories, affected ranges, and recorded fixes.
You specify the source and the destination. Leina uses the content available to your connection and returns the result for you to review.
OSV
OSV is an open vulnerability database that links security advisories to affected software packages and versions.
-
Query the exact version
Use npm, demo-parser, and 1.2.0 to scope the lookup.
-
Read the returned advisory
Extract the vulnerability summary and affected version events.
-
Explain the version match
Compare 1.2.0 with the introduced and fixed boundaries.
What to Ask Leina to Do with OSV
Copy a prompt, add your details, and send it to Leina in your connected team chat.
Read a Vulnerability Record
Get vulnerability [ID] and explain its affected packages, version ranges and references.
osv
Your next OSV task can start with a message.
Connect. Ask. Get the Result.
Tell Leina what you need in your team chat. Include the source, destination, and expected result.
-
Connect Your Account
Connect the tools involved and give Leina access to the content it needs.
-
Try a Task
Share the source material, say where the result belongs, and describe what you need.
-
Check the Result
Review the result and any changes in the connected app.
Put Leina to Work in OSV
Hand off these everyday tasks to your AI employee.
Query Vulnerabilities
Find known vulnerabilities associated with a package or affecting a specific package version.
Get Vulnerability
Get the complete OSV record for a vulnerability identifier.
More Tools for Your AI Employee
Connect the Apps your work depends on, and give Leina the context to carry the task forward.
Keep the Conversation Moving. Let Leina Pick Up the Work.
Hand off a task while your team is discussing it. Leina uses your connected tools and brings the result back to the conversation.
See How Leina Works in SlackLeinaExample Result Version 1.2.0 falls inside the affected range. The advisory lists 1.2.3 as the fixed version.
demo-parser 1.2.0 · Advisory review
OSV + Leina: Your Questions, Answered
Can I read the complete advisory?
Yes. Use the vulnerability ID with get_vulnerability to retrieve the complete OSV record.
How do I connect OSV?
Connect without credentials; OSV uses public vulnerability data.
What should I specify in my request?
Specify the ecosystem, package name and version when checking affected versions. No returned vulnerability does not prove that a package is free of security issues.
Make Leina Your OSV AI Employee
Start with one task you already need to do. Tell Leina what a finished result should look like.
Connect OSV, choose what to share, and hand off your first task.