Sign in
cve

CVE lookup, search and recent list

One path, three shapes, chosen by the query string:

  • id=CVE-… — one catalog document (PostgreSQL CveCatalog): id, description, severity, cvssScore, cvssVector, published, lastModified, title, epssScore, epssPercent (0–100), isKev, kev{listed, dateAdded, dueDate, requiredAction, ransomwareUse, shortDescription}, ssvcExploitation, zdcIsWeaponized, zdcIsZeroDay, zdcExploitCount, msrcExploited, hasNucleiTemplate, exploitdbIds, ghsaIds, certfrLink, vendorAdvisoryId, vendorAdvisoryLink, references[{source, url}], affectedPackages[], vendorAdvisories[]. Legacy aliases summary, publishedDate, lastModifiedDate, opencveTitle are kept. 400 when the id is malformed, 404 when the catalog has no entry.
  • recent=true — {"count", "days", "cves": […]}, newest first, from the Redis cve:recent list with a catalog fallback when it is empty.
  • otherwise — {"query", "severity" ("ALL" when unset), "count", "cves": […]}; query searches Redis cve:search:{query} then the catalog (ILIKE on id, title, description); without query it is the recent list in this envelope.

Items in cves carry id/cveId, description, summary, severity, cvssScore, cvssVector, published, lastModified (each also under its legacy alias) and, from the Redis lists, whatever the ingest stored. Costs one request of the monthly quota.

get/cve

Query parameters

querystring

Free-text search over the catalog (q is accepted as an alias). Ignored when id is set.

limitinteger

Page size: 1–100 (default 20); with recent=true, 1–50 (default 10).

idstring

A CVE id (CVE-YYYY-NNNNN, case-insensitive). When set, the answer is that single document and every other parameter is ignored.

recentstring

true switches to the recent-list shape ({count, days, cves}).

daysinteger

Echoed as days in the recent-list shape (1–90, default 7). It does not filter: the recent list is the catalog's newest entries.

severitystring

Keep only this severity: CRITICAL, HIGH, MEDIUM or LOW (case-insensitive).

Response

A catalog document (id=), {count, days, cves} (recent=true) or {query, severity, count, cves} — see the operation description for the keys

object required

Changes

Changed in 1 of the 14 revisions of this API.1