---
title: "CVE by id (path form)"
method: GET
path: "/cve/{id}"
tags: ["cve"]
---

# CVE by id (path form)

`GET /cve/{id}`

Alias of `GET /cve?id=`: the same catalog document, same errors. One of
the paths a client agent guessed 115 times in a day before finding the
query-string form. Costs one request of the monthly quota.

## Path parameters

- `id` string, required

## Response `200`

The catalog document — same keys as the `id=` branch of `GET /cve`: `id`, `description`, `severity`, `cvssScore`, `cvssVector`, `published`, `lastModified`, `title`, `epssScore`, `epssPercent`, `isKev`, `kev{listed, dateAdded, dueDate, requiredAction, ransomwareUse, shortDescription}`, `ssvcExploitation`, `zdcIsWeaponized`, `zdcIsZeroDay`, `zdcExploitCount`, `msrcExploited`, `hasNucleiTemplate`, `exploitdbIds`, `ghsaIds`, `certfrLink`, `vendorAdvisoryId`, `vendorAdvisoryLink`, `references[]`, `affectedPackages[]`, `vendorAdvisories[]`; nullable where the catalog has no value

- object

## Other responses

- `400` — Id is not of the form `CVE-YYYY-NNNNN`
- `401` — Unauthorized - Missing or invalid API key
- `404` — No catalog entry for this id
- `429` — Too many requests - Rate limit exceeded
- `500` — Database error

## Changes

- **2026-09-23** `edb544398108` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/cve/:id/get.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) · [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/fe46a64acc79?raw)