Open data and feeds

Everything on this site is generated from public sources, and the data is yours to use. Check it against the vendor advisory before acting.

Feeds

data.json: every tracked CVE with scores, fixes and advisories.
data-latest.json: the newest and highest-priority CVEs, plus the counts shown on the home page.

Field	Meaning
id, title, summary	CVE id and a short description
cvss, sev, vector, cwe	Severity score, band, vector string and weakness types
priority, tier, why	0 to 100 score, P0 to P3 tier and the reasons behind it
kev, kev_due, ransom	On the CISA exploited list, its due date, known ransomware use
epss, epss_pct	Exploit probability and its percentile
ssvc	CISA SSVC decision points: exploitation, automatable, technical impact
products, vendors	Affected versions, fixed or safe versions and per-OS fix commands
pocs, mentions	Public exploit and detection links, and advisories or coverage that name the CVE
pub, modified	Publish and last-modified timestamps (UTC)

Please be kind to the server: the files are static and cached, so download them once rather than on every request.