---
title: "Recent CISA Known Exploited Vulnerabilities. Filter by vendor or ransomware flag."
method: GET
path: "/api/v1/cisa/kev/recent"
tags: ["cisa"]
---

# Recent CISA Known Exploited Vulnerabilities. Filter by vendor or ransomware flag.

`GET /api/v1/cisa/kev/recent`

## Request

- Base URL: `https://api.morvs.ai`
- URL: `https://api.morvs.ai/api/v1/cisa/kev/recent`
- Auth: none required

Returns CISA catalog entries ordered by date_added. The JSON-LD _source field identifies the upstream catalog and response provenance; consult source terms before reuse. count is the returned page length.

## Query parameters

- `vendor` string
- `ransomware` 'Known' | 'Unknown'
- `limit` integer

## Response `200`

CISA KEV entries with JSON-LD provenance

- RecentCisaKev
  - `@context` object, required
    - `@vocab` string, required
    - `dcterms` string, required
    - `prov` string, required
  - `@type` 'ItemList', required
  - `@id` string, uri, required
  - `_source` object, required: MORVS response provenance; check the primary source and applicable source terms.
    - `data_provider` string, required
    - `brand_name` string, required
    - `brand_url` string, uri, required
    - `data_provider_url` string, uri, required
    - `license` string, uri, required
    - `dcterms:license` string, uri, required
    - `generated_at` string, date-time, required
    - `primary_source` string, uri, required
  - `filter` object, required
    - `vendor` string, nullable, required
    - `ransomware` string, nullable, required
  - `count` integer, required: Number of rows returned, not all matching KEV entries.
  - `items` object[], required
    - `cve_id` string, required
    - `vendor_project` string, required
    - `product` string, required
    - `vulnerability_name` string, nullable, required
    - `date_added` string, date, nullable, required
    - `due_date` string, date, nullable, required
    - `known_ransomware_use` string, nullable, required
    - `description` string, nullable, required
    - `nvd_url` string, uri, required

---

[API](https://skmtc.dev/morvs/apis/morvs-regulatory-and-public-data-hub.md) · [All operations](https://skmtc.dev/morvs/apis/morvs-regulatory-and-public-data-hub/llms.txt) · [OpenAPI document](https://skmtc.dev/morvs/apis/morvs-regulatory-and-public-data-hub/revisions/16d40173b764?raw)