cve

Am I affected? — a version or a domain checked against one CVE, without an account. Without `product`/`version`/`domain` it returns the affected products and their branches (the CVE page's picker and « versions per branch » data).

Changed on
get/cve/{id}/affected

Request

  • Base URL
    https://api.ismalicious.com
  • Auth
    • API key in header X-API-KEY
    • or HTTP bearer
    • or HTTP basic

Path parameters

idstring required

CVE id, CVE-YYYY-NNNNN

Query parameters

productstring

An identity key (cpe:php:php) or a product name resolved through the catalogue.

versionstring
domainstring

Read the domain's exposed versions instead (guarded fetch).

Response

Verdict per product (affected, not_affected, unverified, not_detected)

cveIdstring required
readAtstring date-time nullable

Changes