---
title: "Search the CVE catalog with structured filters (keyless)"
method: GET
path: "/api/search"
---

# Search the CVE catalog with structured filters (keyless)

`GET /api/search`

## Request

- Base URL: `https://cve-security.com`
- URL: `https://cve-security.com/api/search`
- Auth: none declared

Three modes. (1) q shaped like a CVE id → exact:true with one row, filters ignored (filters_ignored:true is set). (2) q + filters → full-text rank restricted to the filtered set. (3) Filters only, no q → the /browse slice as JSON, ordered KEV-first then EPSS/CVSS, with `page` and `has_more`. Filter semantics: fix=0 means 'computed, and no fix held', rows not yet computed are excluded from both fix=1 and fix=0 (absence semantics). detect covers the four DETECTION-CONTENT engines (Nuclei, Metasploit check, Emerging Threats, Snort), not exploit code. Per-IP rate limited (30/min).

## Query parameters

- `q` string
- `vendor` string
- `cwe` string
- `technique` string
- `year` string
- `sev` string
- `kev` '0' | '1'
- `kev_from` string, date
- `kev_to` string, date
- `kev_vendor` string
- `ransomware` '0' | '1'
- `detect` '0' | '1'
- `fix` '0' | '1'
- `automatable` '0' | '1'
- `ti` 'total' | 'partial'
- `triage_flag` '0' | '1'
- `ssvc` '0' | '1'
- `bod` '3df' | '3d' | '14d' | '60d' | 'fsu'
- `exposed` '0' | '1'
- `eco` string
- `pkg` string
- `sighted` '7' | '30'
- `malware` '0' | '1'
- `watch` '0' | '1'
- `chained` '0' | '1'
- `chainability` '0' | '1'
- `epss_gte` number
- `page` integer
- `limit` integer

## Response `200`

{ query, exact, results[], filters?, filters_ignored?, page?, has_more? }, each result carries cve_id, slug, title, severity, epss_score, kev_listed, detection flags, and url (site-relative). `filters` echoes the active slice in canonical (alphabetical, byte-stable) form.

- object

## Other responses

- `400`: Neither q nor any filter provided
- `429`: Rate limited (Retry-After header)
- `503`: Search unavailable, an outage, NOT an empty result

---

[API](https://skmtc.dev/cve-security/apis/cve-security-api.md) · [All operations](https://skmtc.dev/cve-security/apis/cve-security-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cve-security/apis/cve-security-api/revisions/2470f9c9a4eb?raw)