---
title: "Recent CVEs (bare array)"
method: GET
path: "/cve/recent"
tags: ["cve"]
---

# Recent CVEs (bare array)

`GET /cve/recent`

The same list as `GET /cve?recent=true`, but the 200 body is the bare
JSON array — no `{count, days}` envelope. Newest first, from the Redis
`cve:recent` list with a catalog fallback when it is empty; an empty
array on a database error rather than a 5xx. Costs one request of the
monthly quota.

## Query parameters

- `limit` integer
- `severity` string

## Response `200`

Array of CVE items: `id`/`cveId`, `description`, `summary`, `severity`, `cvssScore`, `cvssVector`, `published`, `lastModified` and their legacy aliases

- object[]

## Other responses

- `401` — Unauthorized - Missing or invalid API key
- `429` — Too many requests - Rate limit exceeded

## Changes

- **2026-09-23** `edb544398108` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/cve/recent/get.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) · [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/fe46a64acc79?raw)