---
title: "GET /stats/cvss/scores"
method: GET
path: "/stats/cvss/scores"
tags: ["stats"]
---

# GET /stats/cvss/scores

`GET /stats/cvss/scores`

## Request

- Base URL: `/api` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/stats/cvss/scores`
- Auth: API key in header `X-API-KEY`

Returns the severity band distribution of a source.

## Query parameters

- `source` string
- `period` string

## Response `200`

Success.

- StatsDistribution
  - `available` boolean: False when the distribution has never been prepared; distribution is then empty.
  - `distribution` object: Bucket -> record count.
  - `period` string: The publication year the distribution covers, or null for all of it.
  - `source` string: The source reported on.

## Other responses

- `400`: The request could not be satisfied.

## Changes

- **2026-09-21** `a850f2cbf0bc`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/changes/stats/cvss/scores/get.md)

---

[API](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api.md) - [All operations](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/llms.txt) - [OpenAPI document](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/revisions/b4dedf027493?raw)