VUvulnerability-lookup
kev

List KEV entries with pagination and filtering

Changed on
get/kev

Request

  • Base URL
    /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /api/kev
  • Auth
    API key in header X-API-KEY

Query parameters

pageinteger

Page number

per_pageinteger

Items per page (max 1000)

vuln_idstring

Filter by vulnerability ID

status_reason'confirmed' | 'suspected' | 'disputed' | 'historical' | 'unknown' | 'withdrawn'
exploited'true' | 'false' | 'all'

Filter by exploited status. Defaults to true: the current KEV set, which per BCP-07 excludes every exploited=false record (withdrawn assertions among them). Pass false for those records only, or all for every record. Filtering on a status_reason implies all.

vulnerability_lookup_originstring

Filter by origin instance UUID

date_fromstring date

Filter from date (YYYY-MM-DD)

date_tostring date

Filter to date (YYYY-MM-DD)

authorstring

Filter by author login

Headers

X-Fieldsstring mask

An optional fields mask

Response

Success

Example response

{
  "data": [
    {
      "evidence": [
        {
          "type": "incident_response"
        }
      ],
      "status": {
        "status_reason": "confirmed"
      }
    }
  ]
}

Changes