CVE Intelligence by Casco
Casco v1.0.1
Public CVE intelligence
From the developer
Declared capabilities
- CVE lookups
- Dependency vulnerability checks
- CVE updates
Cost & access
The connector is free. It does not sell products, charge users, or process payments.
Declared limitations
- Clarify unresolved version ranges
- Unsupported changes to user systems
- Private data is outside the public connector
Onboarding example
Look up CVE-2024-3094 and explain affected versions with sources.
Sources & dates
Developer declarations; not independently tested. Listing last checked Nov 5, 2026. Package observed Nov 4, 2026.
Description
From the marketplace listing
Look up an exact CVE ID for affected products and version rules, severity, references, rejection status, and source timestamps. Check exact installed package versions against OSV advisories, discover supported ecosystems, and follow CVE updates with resumable checkpoints. This hosted, read-only connector requires no signup, OAuth, API key, or local installation. CVE records come from CVE List V5; dependency checks use OSV and return affected, no known vulnerabilities, or unknown outcomes with source evidence. Unknown or incomplete results are not clean results, and no known match is not proof of safety. It does not modify files, install updates, scan targets, or access private Casco customer findings. Only explicit tool arguments are processed. Dependency-check cache misses send package identities and versions to OSV. Successful queries and results are cached server-side for 15 minutes of freshness; private cache entries may persist longer until overwritten or deleted. No chat history, raw source-code upload, or credentials are required.
Language: English · Automatically detected from descriptions.
Changes
No changes recorded yet. Follow this plugin to keep track of future changes.
First seen Nov 4, 2026. Last seen Nov 5, 2026.
Similar plugins
Find competitors to follow as you develop your plugin.
-
Domain intelligence: availability, DNS, WHOIS and RDAP, SSL, email security, valuation, and website checks.
Shared terms: intelligence, incomplete, oauth, unknown
-
Evidence-first security advisory triage with NVD, OSV, FIRST EPSS, and CISA KEV.
Shared terms: cve, advisorie, finding, known
-
Triage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole d...
Shared terms: cve, dependency, known, package
-
Look up npm package metadata, known vulnerabilities, and CVE details directly from a conversation. NPMScan's MCP server gives AI agents r...
Shared terms: advisorie, api, cve, exact
-
Domainee is a custom domains API for SaaS with a native MCP server. 50 domains and 100 GB are free. Connect a customer's hostname and ge...
Shared terms: api, endpoint, finding, hosted
Keywords
Files & skills
File archives
Release notes
Initial release with CVE lookup, exact-version dependency checks, supported-ecosystem discovery, and incremental CVE updates.
Declared in the saved package. Remote tools may change independently.
Package details
Publisher declarations from the archived package. These are separate from our research and the live service's terms.
- Package author
- Casco
- Keywords
- See keywords
- Commerce declaration
- Does not support commerceThis does not establish whether access is free or paid.
- Review scenarios
- 5 positive · 3 negativeScenario counts, not test results.
Declared capabilities
- CVE lookups
- Dependency vulnerability checks
- CVE updates
Package observed Nov 4, 2026.
Technical details
- First seen
- Nov 4, 2026 · 18:00 UTC
- Last seen
- Nov 5, 2026 · 00:00 UTC
- Collection status
- Collected
plugin_asdk_app_6aeaa3fa6224819198087ae10be06cf7
Download plugin data (JSON)