CVE lookup, search and recent list
One path, three shapes, chosen by the query string:
- id=CVE-… — one catalog document (PostgreSQL CveCatalog): id, description, severity, cvssScore, cvssVector, published, lastModified, title, epssScore, epssPercent (0–100), isKev, kev{listed, dateAdded, dueDate, requiredAction, ransomwareUse, shortDescription}, ssvcExploitation, zdcIsWeaponized, zdcIsZeroDay, zdcExploitCount, msrcExploited, hasNucleiTemplate, exploitdbIds, ghsaIds, certfrLink, vendorAdvisoryId, vendorAdvisoryLink, references[{source, url}], affectedPackages[], vendorAdvisories[]. Legacy aliases summary, publishedDate, lastModifiedDate, opencveTitle are kept. 400 when the id is malformed, 404 when the catalog has no entry.
- recent=true — {"count", "days", "cves": […]}, newest first, from the Redis cve:recent list with a catalog fallback when it is empty.
- otherwise — {"query", "severity" ("ALL" when unset), "count", "cves": […]}; query searches Redis cve:search:{query} then the catalog (ILIKE on id, title, description); without query it is the recent list in this envelope.
Items in cves carry id/cveId, description, summary, severity, cvssScore, cvssVector, published, lastModified (each also under its legacy alias) and, from the Redis lists, whatever the ingest stored. Costs one request of the monthly quota.
Query parameters
Free-text search over the catalog (q is accepted as an alias). Ignored when id is set.
Page size: 1–100 (default 20); with recent=true, 1–50 (default 10).
A CVE id (CVE-YYYY-NNNNN, case-insensitive). When set, the answer is that single document and every other parameter is ignored.
true switches to the recent-list shape ({count, days, cves}).
Echoed as days in the recent-list shape (1–90, default 7). It does not filter: the recent list is the catalog's newest entries.
Keep only this severity: CRITICAL, HIGH, MEDIUM or LOW (case-insensitive).
Response
A catalog document (id=), {count, days, cves} (recent=true) or {query, severity, count, cves} — see the operation description for the keys