Osv Ref
@cve:, @ghsa: and @osv: context references: attach a vulnerability record from OSV.dev to a message (summary, aliases, severity, affected packages with version ranges and fixed versions, details, references), with package data merged from up to four alias records.
Good to know before installing
Sends HTTPS GET requests to api.osv.dev/v1/vulns/<id> only (the referenced id and up to four of its alias ids leave the machine); no API key, no files written, no subprocess; register() only adds the @cve:, @ghsa: and @osv: reference providers.
From the plugin's catalog listing.
How to install
- Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install osv-ref - Said no? Turn it on later:
hermes plugins enable osv-ref - Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).
- Category
- Cost, speed & monitoring · Web, research & browsing
- Maintained by
- EloquentBrush0x (Community)
- Needs
- No API keys declared
- Needs Hermes
- 0.21 or newer
- Version
- 1.0.0
- In the catalog
- 2026-10-02
- GitHub stars
- 1
Full setup & settings ↗Source code ↗
More in cost, speed & monitoring
All cost, speed & monitoring plugins
New Hermes Agent updates every day on X. Follow @HermesWatcher