VUvulnerability-lookup
vulnerability

Get the timeline of a vulnerability

Changed on

Every dated event of a vulnerability, oldest first: the dates of its record and of every related record (publication, updates, advisory revisions, SSVC decisions, disclosure events...), its sightings and its KEV catalog entries. Sightings and KEV entries filed under the GCVE-0 spelling of a CVE, or listing it in altId, are included. The Timeline tab of the vulnerability page shows the same events and duration calculations, including evidence, approximations and missing dates.

get/vulnerability/{vulnerability_id}/timeline

Request

  • Base URL
    /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /api/vulnerability/{vulnerability_id}/timeline
  • Auth
    API key in header X-API-KEY

Response

Success.

metadataobject

vulnerability: the id served; count: the number of events; kinds: the count per kind.

Example response

{
  "data": [
    {
      "field": "cveMetadata.datePublished",
      "kind": "milestone",
      "label": "Published",
      "record": "CVE-2026-1234",
      "source": "cvelistv5 / CISA-ADP",
      "timestamp": "2026-10-05T21:30:00Z"
    }
  ],
  "metadata": {
    "count": 3,
    "kinds": {
      "kev": 0,
      "milestone": 2,
      "other": 0,
      "sighting": 1
    },
    "vulnerability": "CVE-2026-1234"
  },
  "metrics": {
    "disclosure_to_exploit": {
      "end": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      },
      "start": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      }
    },
    "disclosure_to_exploit_publication": {
      "end": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      },
      "start": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      }
    },
    "disclosure_to_patch": {
      "end": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      },
      "start": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      }
    },
    "exploit_publication_to_patch": {
      "end": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      },
      "start": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      }
    },
    "exploitation_to_patch": {
      "end": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      },
      "start": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      }
    },
    "time_to_exploit": {
      "end": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      },
      "start": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      }
    },
    "time_to_patch": {
      "end": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      },
      "start": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      }
    },
    "time_unpatched": {
      "end": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      },
      "start": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      }
    },
    "total_time_to_patch": {
      "end": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      },
      "start": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      }
    },
    "vendor_response_time": {
      "end": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      },
      "start": {
        "field": "cveMetadata.datePublished",
        "kind": "milestone",
        "label": "Published",
        "record": "CVE-2026-1234",
        "source": "cvelistv5 / CISA-ADP",
        "timestamp": "2026-10-05T21:30:00Z"
      }
    }
  }
}

Changes