{"openapi":"3.1.0","info":{"title":"CVE Tracker API","version":"1.4.0","summary":"Free, public, read-only API over the CVE List, NVD, CISA KEV, FIRST EPSS and GitHub advisories.","description":"No key, `GET` only, JSON. Each caller may make 120 requests per minute (`RateLimit-*` headers). Full reference with examples: https://trackcve.app/api","license":{"name":"MIT","identifier":"MIT"}},"externalDocs":{"description":"API reference","url":"https://trackcve.app/api"},"servers":[{"url":"/v1"}],"security":[],"paths":{"/cves":{"get":{"operationId":"listCves","summary":"One page of CVEs matching a filter","parameters":[{"name":"q","in":"query","required":false,"description":"A CVE id or its start (`CVE-2024-3`), or words found in the title, description, vendor or product. 3–200 characters.","schema":{"type":"string","maxLength":200}},{"name":"severity","in":"query","required":false,"description":"Comma-separated, any case: CRITICAL, HIGH, MEDIUM, LOW, NONE, UNKNOWN.","schema":{"type":"string","example":"CRITICAL,HIGH"}},{"name":"kev","in":"query","required":false,"description":"`true` (or `1`): only CVEs in CISA's Known Exploited Vulnerabilities catalog.","schema":{"type":"string","enum":["true","1","false","0"]}},{"name":"vendor","in":"query","required":false,"description":"A vendor among the record's affected products, exact name in any case. See `/v1/vendors`.","schema":{"type":"string"}},{"name":"product","in":"query","required":false,"description":"A product among the affected, of `vendor` when one is given. See `/v1/products`.","schema":{"type":"string"}},{"name":"ecosystem","in":"query","required":false,"description":"Only CVEs with a reviewed GitHub advisory for a package of this ecosystem, in any case: npm, PyPI, Maven, NuGet, Go, RubyGems, crates.io, Packagist, Pub, Hex, SwiftURL, GitHub Actions.","schema":{"type":"string","example":"npm"}},{"name":"cwe","in":"query","required":false,"description":"Only CVEs whose record or NVD names this weakness: `CWE-79` or `79`. See `/v1/cwes`.","schema":{"type":"string","pattern":"^\\s*(?:[Cc][Ww][Ee]-)?0*\\d{1,6}\\s*$","example":"CWE-79"}},{"name":"assigner","in":"query","required":false,"description":"Only CVEs assigned by this CNA, by its short name in any case (`GitHub_M`). See `/v1/assigners`.","schema":{"type":"string"}},{"name":"range","in":"query","required":false,"description":"Publication date window, resolved in UTC when the request runs.","schema":{"type":"string","enum":["all","today","24h","week","7d","month","30d","90d","year","6m","12m","custom"],"default":"all"}},{"name":"from","in":"query","required":false,"description":"First day of a `custom` range, inclusive.","schema":{"type":"string","format":"date"}},{"name":"to","in":"query","required":false,"description":"Last day of a `custom` range, inclusive.","schema":{"type":"string","format":"date"}},{"name":"sort","in":"query","required":false,"description":"Order of the rows. `kevAdded`: when CISA added it to KEV, CVEs not in KEV last.","schema":{"type":"string","enum":["published","updated","id","score","epss","kevAdded"],"default":"published"}},{"name":"dir","in":"query","required":false,"description":"Direction of the order.","schema":{"type":"string","enum":["desc","asc"],"default":"desc"}},{"name":"strict","in":"query","required":false,"description":"With `true`, a value the filter would otherwise ignore (an unknown parameter, a misspelled severity) is a 400 instead.","schema":{"type":"boolean","default":false}},{"name":"page","in":"query","required":false,"description":"Page number from 1; clamped to `maxPage` (the first 10000 rows are reachable).","schema":{"type":"integer","minimum":1,"default":1}},{"name":"pageSize","in":"query","required":false,"description":"Rows per page; values above 100 are clamped.","schema":{"type":"integer","minimum":1,"maximum":100,"default":50}}],"responses":{"200":{"description":"The page","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CveListResponse"}}}},"400":{"description":"VALIDATION_FAILED: a malformed parameter","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/cves/{id}":{"get":{"operationId":"getCve","summary":"Everything known about one CVE","parameters":[{"name":"id","in":"path","required":true,"description":"The CVE id, any case.","schema":{"type":"string","pattern":"^[Cc][Vv][Ee]-\\d{4}-\\d{4,}$","example":"CVE-2021-44228"}}],"responses":{"200":{"description":"The CVE, rejected ones included","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CveDetail"}}}},"400":{"description":"VALIDATION_FAILED: a malformed parameter","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"404":{"description":"NOT_FOUND","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/cves/{id}/epss":{"get":{"operationId":"getEpssHistory","summary":"EPSS of one CVE day by day, about the last 30 days","parameters":[{"name":"id","in":"path","required":true,"description":"The CVE id, any case.","schema":{"type":"string","pattern":"^[Cc][Vv][Ee]-\\d{4}-\\d{4,}$","example":"CVE-2021-44228"}}],"responses":{"200":{"description":"The history","content":{"application/json":{"schema":{"$ref":"#/components/schemas/EpssHistoryResponse"}}}},"400":{"description":"VALIDATION_FAILED: a malformed parameter","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"404":{"description":"NOT_FOUND","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/export":{"get":{"operationId":"exportCves","summary":"Every CVE of a filter, up to 10000, as CSV or JSON","parameters":[{"name":"q","in":"query","required":false,"description":"A CVE id or its start (`CVE-2024-3`), or words found in the title, description, vendor or product. 3–200 characters.","schema":{"type":"string","maxLength":200}},{"name":"severity","in":"query","required":false,"description":"Comma-separated, any case: CRITICAL, HIGH, MEDIUM, LOW, NONE, UNKNOWN.","schema":{"type":"string","example":"CRITICAL,HIGH"}},{"name":"kev","in":"query","required":false,"description":"`true` (or `1`): only CVEs in CISA's Known Exploited Vulnerabilities catalog.","schema":{"type":"string","enum":["true","1","false","0"]}},{"name":"vendor","in":"query","required":false,"description":"A vendor among the record's affected products, exact name in any case. See `/v1/vendors`.","schema":{"type":"string"}},{"name":"product","in":"query","required":false,"description":"A product among the affected, of `vendor` when one is given. See `/v1/products`.","schema":{"type":"string"}},{"name":"ecosystem","in":"query","required":false,"description":"Only CVEs with a reviewed GitHub advisory for a package of this ecosystem, in any case: npm, PyPI, Maven, NuGet, Go, RubyGems, crates.io, Packagist, Pub, Hex, SwiftURL, GitHub Actions.","schema":{"type":"string","example":"npm"}},{"name":"cwe","in":"query","required":false,"description":"Only CVEs whose record or NVD names this weakness: `CWE-79` or `79`. See `/v1/cwes`.","schema":{"type":"string","pattern":"^\\s*(?:[Cc][Ww][Ee]-)?0*\\d{1,6}\\s*$","example":"CWE-79"}},{"name":"assigner","in":"query","required":false,"description":"Only CVEs assigned by this CNA, by its short name in any case (`GitHub_M`). See `/v1/assigners`.","schema":{"type":"string"}},{"name":"range","in":"query","required":false,"description":"Publication date window, resolved in UTC when the request runs.","schema":{"type":"string","enum":["all","today","24h","week","7d","month","30d","90d","year","6m","12m","custom"],"default":"all"}},{"name":"from","in":"query","required":false,"description":"First day of a `custom` range, inclusive.","schema":{"type":"string","format":"date"}},{"name":"to","in":"query","required":false,"description":"Last day of a `custom` range, inclusive.","schema":{"type":"string","format":"date"}},{"name":"sort","in":"query","required":false,"description":"Order of the rows. `kevAdded`: when CISA added it to KEV, CVEs not in KEV last.","schema":{"type":"string","enum":["published","updated","id","score","epss","kevAdded"],"default":"published"}},{"name":"dir","in":"query","required":false,"description":"Direction of the order.","schema":{"type":"string","enum":["desc","asc"],"default":"desc"}},{"name":"strict","in":"query","required":false,"description":"With `true`, a value the filter would otherwise ignore (an unknown parameter, a misspelled severity) is a 400 instead.","schema":{"type":"boolean","default":false}},{"name":"format","in":"query","required":false,"description":"File format.","schema":{"type":"string","enum":["csv","json"],"default":"csv"}}],"responses":{"200":{"description":"A download (`Content-Disposition: attachment`)","content":{"text/csv":{"schema":{"type":"string","description":"RFC 4180, CRLF, a header row: id,published,updated,severity,score,epss,kev,vendor,product,title"}},"application/json":{"schema":{"type":"object","properties":{"items":{"type":"array","items":{"$ref":"#/components/schemas/CveListItem"}}},"required":["items"]}}}},"400":{"description":"VALIDATION_FAILED: a malformed parameter","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/timeline":{"get":{"operationId":"timeline","summary":"Matching CVEs per time bucket and severity","parameters":[{"name":"q","in":"query","required":false,"description":"A CVE id or its start (`CVE-2024-3`), or words found in the title, description, vendor or product. 3–200 characters.","schema":{"type":"string","maxLength":200}},{"name":"severity","in":"query","required":false,"description":"Comma-separated, any case: CRITICAL, HIGH, MEDIUM, LOW, NONE, UNKNOWN.","schema":{"type":"string","example":"CRITICAL,HIGH"}},{"name":"kev","in":"query","required":false,"description":"`true` (or `1`): only CVEs in CISA's Known Exploited Vulnerabilities catalog.","schema":{"type":"string","enum":["true","1","false","0"]}},{"name":"vendor","in":"query","required":false,"description":"A vendor among the record's affected products, exact name in any case. See `/v1/vendors`.","schema":{"type":"string"}},{"name":"product","in":"query","required":false,"description":"A product among the affected, of `vendor` when one is given. See `/v1/products`.","schema":{"type":"string"}},{"name":"ecosystem","in":"query","required":false,"description":"Only CVEs with a reviewed GitHub advisory for a package of this ecosystem, in any case: npm, PyPI, Maven, NuGet, Go, RubyGems, crates.io, Packagist, Pub, Hex, SwiftURL, GitHub Actions.","schema":{"type":"string","example":"npm"}},{"name":"cwe","in":"query","required":false,"description":"Only CVEs whose record or NVD names this weakness: `CWE-79` or `79`. See `/v1/cwes`.","schema":{"type":"string","pattern":"^\\s*(?:[Cc][Ww][Ee]-)?0*\\d{1,6}\\s*$","example":"CWE-79"}},{"name":"assigner","in":"query","required":false,"description":"Only CVEs assigned by this CNA, by its short name in any case (`GitHub_M`). See `/v1/assigners`.","schema":{"type":"string"}},{"name":"range","in":"query","required":false,"description":"Publication date window, resolved in UTC when the request runs.","schema":{"type":"string","enum":["all","today","24h","week","7d","month","30d","90d","year","6m","12m","custom"],"default":"all"}},{"name":"from","in":"query","required":false,"description":"First day of a `custom` range, inclusive.","schema":{"type":"string","format":"date"}},{"name":"to","in":"query","required":false,"description":"Last day of a `custom` range, inclusive.","schema":{"type":"string","format":"date"}},{"name":"sort","in":"query","required":false,"description":"Order of the rows. `kevAdded`: when CISA added it to KEV, CVEs not in KEV last.","schema":{"type":"string","enum":["published","updated","id","score","epss","kevAdded"],"default":"published"}},{"name":"dir","in":"query","required":false,"description":"Direction of the order.","schema":{"type":"string","enum":["desc","asc"],"default":"desc"}},{"name":"strict","in":"query","required":false,"description":"With `true`, a value the filter would otherwise ignore (an unknown parameter, a misspelled severity) is a 400 instead.","schema":{"type":"boolean","default":false}}],"responses":{"200":{"description":"The buckets","content":{"application/json":{"schema":{"$ref":"#/components/schemas/TimelineResponse"}}}},"400":{"description":"VALIDATION_FAILED: a malformed parameter","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/summary":{"get":{"operationId":"summary","summary":"Headline counts and when each source was last read","parameters":[],"responses":{"200":{"description":"The counts","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SummaryResponse"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/vendors":{"get":{"operationId":"vendors","summary":"Vendor names for the vendor filter, with CVE counts","parameters":[{"name":"q","in":"query","required":false,"description":"Part of the name.","schema":{"type":"string"}}],"responses":{"200":{"description":"Up to 20, most CVEs first","content":{"application/json":{"schema":{"$ref":"#/components/schemas/FacetResponse"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/products":{"get":{"operationId":"products","summary":"Product names for the product filter, with CVE counts","parameters":[{"name":"vendor","in":"query","required":false,"description":"Only products of this vendor (exact, any case).","schema":{"type":"string"}},{"name":"q","in":"query","required":false,"description":"Part of the name.","schema":{"type":"string"}}],"responses":{"200":{"description":"Up to 20, most CVEs first","content":{"application/json":{"schema":{"$ref":"#/components/schemas/FacetResponse"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/assigners":{"get":{"operationId":"assigners","summary":"CNAs for the assigner filter, with CVE counts","parameters":[{"name":"q","in":"query","required":false,"description":"Part of the short name.","schema":{"type":"string"}}],"responses":{"200":{"description":"Up to 20, most CVEs first","content":{"application/json":{"schema":{"$ref":"#/components/schemas/FacetResponse"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/cwes":{"get":{"operationId":"cwes","summary":"Weaknesses for the cwe filter, with CVE counts","parameters":[{"name":"q","in":"query","required":false,"description":"Part of the id (`79`, `CWE-7`).","schema":{"type":"string"}}],"responses":{"200":{"description":"Up to 20, most CVEs first","content":{"application/json":{"schema":{"$ref":"#/components/schemas/FacetResponse"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/stats":{"get":{"operationId":"stats","summary":"What the CVEs published in a window were: severity, top weaknesses, vendors and CNAs","parameters":[{"name":"range","in":"query","required":false,"description":"The window, ending now.","schema":{"type":"string","enum":["7d","30d","90d","12m"],"default":"30d"}}],"responses":{"200":{"description":"The statistics","content":{"application/json":{"schema":{"$ref":"#/components/schemas/StatsResponse"}}}},"400":{"description":"VALIDATION_FAILED: a malformed parameter","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/ecosystems":{"get":{"operationId":"ecosystems","summary":"Package ecosystems with CVE counts","parameters":[],"responses":{"200":{"description":"Every ecosystem, most CVEs first","content":{"application/json":{"schema":{"$ref":"#/components/schemas/FacetResponse"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/vendors/{vendor}":{"get":{"operationId":"vendor","summary":"One vendor's CVEs, or one product's: counts by severity and year, top products and weaknesses, the newest and the known exploited","parameters":[{"name":"vendor","in":"path","required":true,"description":"The vendor, any case, as the records name it. See `/v1/vendors`.","schema":{"type":"string","example":"Microsoft"}},{"name":"product","in":"query","required":false,"description":"One of its products, any case. See `/v1/products`.","schema":{"type":"string","example":"Windows 11"}}],"responses":{"200":{"description":"The vendor or product","content":{"application/json":{"schema":{"$ref":"#/components/schemas/VendorResponse"}}}},"400":{"description":"VALIDATION_FAILED: a malformed parameter","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"404":{"description":"NOT_FOUND","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/cwes/{cwe}":{"get":{"operationId":"weakness","summary":"The CVEs of one weakness: counts by severity and year, the vendors it comes up for most, the newest and the known exploited","parameters":[{"name":"cwe","in":"path","required":true,"description":"The weakness, `CWE-79` or `79`.","schema":{"type":"string","pattern":"^\\s*(?:[Cc][Ww][Ee]-)?0*\\d{1,6}\\s*$","example":"CWE-79"}}],"responses":{"200":{"description":"The weakness","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WeaknessResponse"}}}},"400":{"description":"VALIDATION_FAILED: a malformed parameter","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"404":{"description":"NOT_FOUND","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/weekly":{"get":{"operationId":"weekly","summary":"One ISO week of CVEs: counts by severity, the most severe, KEV additions, top vendors and weaknesses","parameters":[{"name":"week","in":"query","required":false,"description":"An ISO week, `2026-W45` (Monday to Sunday, UTC). Defaults to the last complete week.","schema":{"type":"string","pattern":"^\\d{4}-W\\d{2}$","example":"2026-W45"}}],"responses":{"200":{"description":"The week's digest","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WeeklyResponse"}}}},"400":{"description":"VALIDATION_FAILED: a malformed parameter","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/epss/movers":{"get":{"operationId":"epssMovers","summary":"The CVEs whose EPSS rose the most over a window","parameters":[{"name":"window","in":"query","required":false,"description":"Today's scores against those of a day, a week or a month before.","schema":{"type":"string","enum":["1d","7d","30d"],"default":"7d"}}],"responses":{"200":{"description":"Up to 50 published CVEs, the largest rise first","content":{"application/json":{"schema":{"$ref":"#/components/schemas/EpssMoversResponse"}}}},"400":{"description":"VALIDATION_FAILED: a malformed parameter","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"RATE_LIMITED: wait for `Retry-After` seconds","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"500":{"description":"INTERNAL: quote the `requestId`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"503":{"description":"UNAVAILABLE: overloaded or a query timed out; retry after `Retry-After`","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}}},"/health":{"get":{"operationId":"health","summary":"Whether the API is up, and its version","parameters":[],"responses":{"200":{"description":"Up","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HealthResponse"}}}}}}}},"components":{"schemas":{"CveListItem":{"type":"object","properties":{"id":{"type":"string"},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"title":{"type":"string"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"score":{"type":["number","null"]},"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]},"kevAdded":{"type":["string","null"]}},"required":["id","published","updated","title","severity","score","vendor","product","kev","epss","kevAdded"]},"CveListResponse":{"type":"object","properties":{"items":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"title":{"type":"string"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"score":{"type":["number","null"]},"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]},"kevAdded":{"type":["string","null"]}},"required":["id","published","updated","title","severity","score","vendor","product","kev","epss","kevAdded"]}},"total":{"type":"number"},"totalCapped":{"type":"boolean"},"page":{"type":"number"},"pageSize":{"type":"number"},"maxPage":{"type":"number"}},"required":["items","total","totalCapped","page","pageSize","maxPage"]},"CveDetail":{"type":"object","properties":{"id":{"type":"string"},"state":{"type":"string","enum":["PUBLISHED","REJECTED"]},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"reserved":{"type":["string","null"]},"assigner":{"type":["string","null"]},"title":{"type":["string","null"]},"description":{"type":"string"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"score":{"type":["number","null"]},"cvss":{"type":"array","items":{"type":"object","properties":{"source":{"type":"string","enum":["cna","adp","nvd"]},"provider":{"type":"string"},"version":{"type":"string"},"score":{"type":"number"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"vector":{"type":["string","null"]}},"required":["source","provider","version","score","severity","vector"]}},"weaknesses":{"type":"array","items":{"type":"object","properties":{"id":{"type":["string","null"]},"description":{"type":"string"}},"required":["id","description"]}},"affected":{"type":"array","items":{"type":"object","properties":{"vendor":{"type":"string"},"product":{"type":"string"},"defaultStatus":{"type":["string","null"]},"versions":{"type":"array","items":{"type":"object","properties":{"version":{"type":"string"},"status":{"type":"string"},"lessThan":{"type":["string","null"]},"lessThanOrEqual":{"type":["string","null"]},"versionType":{"type":["string","null"]}},"required":["version","status","lessThan","lessThanOrEqual","versionType"]}}},"required":["vendor","product","defaultStatus","versions"]}},"references":{"type":"array","items":{"type":"object","properties":{"url":{"type":"string","pattern":"^https?:\\/\\/"},"name":{"type":["string","null"]},"tags":{"type":"array","items":{"type":"string"}}},"required":["url","name","tags"]}},"solutions":{"type":"array","items":{"type":"string"}},"workarounds":{"type":"array","items":{"type":"string"}},"exploits":{"type":"array","items":{"type":"string"}},"rejectedReasons":{"type":"array","items":{"type":"string"}},"kev":{"anyOf":[{"type":"object","properties":{"name":{"type":"string"},"dateAdded":{"type":"string"},"dueDate":{"type":["string","null"]},"requiredAction":{"type":["string","null"]},"knownRansomware":{"type":"boolean"},"notes":{"type":["string","null"]}},"required":["name","dateAdded","dueDate","requiredAction","knownRansomware","notes"]},{"type":"null"}]},"epss":{"anyOf":[{"type":"object","properties":{"score":{"type":"number"},"percentile":{"type":"number"},"date":{"type":"string"}},"required":["score","percentile","date"]},{"type":"null"}]},"ssvc":{"anyOf":[{"type":"object","properties":{"exploitation":{"type":["string","null"]},"automatable":{"type":["string","null"]},"technicalImpact":{"type":["string","null"]}},"required":["exploitation","automatable","technicalImpact"]},{"type":"null"}]},"nvdStatus":{"type":["string","null"]},"packages":{"type":"array","items":{"type":"object","properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"advisory":{"type":"string"}},"required":["ecosystem","name","advisory"]}},"sources":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"url":{"type":"string","pattern":"^https?:\\/\\/"}},"required":["name","url"]}}},"required":["id","state","published","updated","reserved","assigner","title","description","severity","score","cvss","weaknesses","affected","references","solutions","workarounds","exploits","rejectedReasons","kev","epss","ssvc","nvdStatus","packages","sources"]},"EpssHistoryResponse":{"type":"object","properties":{"points":{"type":"array","items":{"type":"object","properties":{"date":{"type":"string"},"score":{"type":"number"},"percentile":{"type":"number"}},"required":["date","score","percentile"]}}},"required":["points"]},"TimelineResponse":{"type":"object","properties":{"granularity":{"type":"string","enum":["hour","day","week","month","year"]},"before":{"type":"number"},"points":{"type":"array","items":{"type":"object","properties":{"key":{"type":"string"},"total":{"type":"number"},"critical":{"type":"number"},"high":{"type":"number"},"medium":{"type":"number"},"low":{"type":"number"},"none":{"type":"number"},"unknown":{"type":"number"}},"required":["key","total","critical","high","medium","low","none","unknown"]}}},"required":["granularity","before","points"]},"SummaryResponse":{"type":"object","properties":{"total":{"type":"number"},"rejected":{"type":"number"},"last24h":{"type":"number"},"last7d":{"type":"number"},"last30d":{"type":"number"},"critical30d":{"type":"number"},"kev":{"type":"number"},"sources":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"syncedAt":{"type":["string","null"]}},"required":["name","syncedAt"]}}},"required":["total","rejected","last24h","last7d","last30d","critical30d","kev","sources"]},"FacetResponse":{"type":"object","properties":{"items":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"count":{"type":"number"}},"required":["name","count"]}}},"required":["items"]},"StatsResponse":{"type":"object","properties":{"range":{"type":"string","enum":["7d","30d","90d","12m"]},"from":{"type":"string"},"total":{"type":"number"},"scored":{"type":"number"},"kev":{"type":"number"},"kevAdded":{"type":"number"},"severity":{"type":"object","properties":{"critical":{"type":"number"},"high":{"type":"number"},"medium":{"type":"number"},"low":{"type":"number"},"none":{"type":"number"},"unknown":{"type":"number"}},"required":["critical","high","medium","low","none","unknown"]},"cwes":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"count":{"type":"number"}},"required":["name","count"]}},"vendors":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"count":{"type":"number"}},"required":["name","count"]}},"assigners":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"count":{"type":"number"}},"required":["name","count"]}}},"required":["range","from","total","scored","kev","kevAdded","severity","cwes","vendors","assigners"]},"EpssMoversResponse":{"type":"object","properties":{"window":{"type":"string","enum":["1d","7d","30d"]},"from":{"type":["string","null"]},"to":{"type":["string","null"]},"items":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"title":{"type":"string"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"score":{"type":["number","null"]},"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]},"kevAdded":{"type":["string","null"]},"epssBefore":{"type":"number"}},"required":["id","published","updated","title","severity","score","vendor","product","kev","epss","kevAdded","epssBefore"]}}},"required":["window","from","to","items"]},"WeeklyResponse":{"type":"object","properties":{"week":{"type":"string"},"from":{"type":"string"},"to":{"type":"string"},"complete":{"type":"boolean"},"total":{"type":"number"},"severity":{"type":"object","properties":{"critical":{"type":"number"},"high":{"type":"number"},"medium":{"type":"number"},"low":{"type":"number"},"none":{"type":"number"},"unknown":{"type":"number"}},"required":["critical","high","medium","low","none","unknown"]},"top":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"title":{"type":"string"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"score":{"type":["number","null"]},"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]},"kevAdded":{"type":["string","null"]}},"required":["id","published","updated","title","severity","score","vendor","product","kev","epss","kevAdded"]}},"kev":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"title":{"type":"string"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"score":{"type":["number","null"]},"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]},"kevAdded":{"type":["string","null"]}},"required":["id","published","updated","title","severity","score","vendor","product","kev","epss","kevAdded"]}},"vendors":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"count":{"type":"number"}},"required":["name","count"]}},"cwes":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"count":{"type":"number"}},"required":["name","count"]}}},"required":["week","from","to","complete","total","severity","top","kev","vendors","cwes"]},"VendorResponse":{"type":"object","properties":{"vendor":{"type":"string"},"product":{"type":["string","null"]},"total":{"type":"number"},"kev":{"type":"number"},"lastYear":{"type":"number"},"severity":{"type":"object","properties":{"critical":{"type":"number"},"high":{"type":"number"},"medium":{"type":"number"},"low":{"type":"number"},"none":{"type":"number"},"unknown":{"type":"number"}},"required":["critical","high","medium","low","none","unknown"]},"years":{"type":"array","items":{"type":"object","properties":{"year":{"type":"string"},"count":{"type":"number"}},"required":["year","count"]}},"latest":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"title":{"type":"string"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"score":{"type":["number","null"]},"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]},"kevAdded":{"type":["string","null"]}},"required":["id","published","updated","title","severity","score","vendor","product","kev","epss","kevAdded"]}},"exploited":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"title":{"type":"string"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"score":{"type":["number","null"]},"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]},"kevAdded":{"type":["string","null"]}},"required":["id","published","updated","title","severity","score","vendor","product","kev","epss","kevAdded"]}},"products":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"count":{"type":"number"}},"required":["name","count"]}},"cwes":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"count":{"type":"number"}},"required":["name","count"]}}},"required":["vendor","product","total","kev","lastYear","severity","years","latest","exploited","products","cwes"]},"WeaknessResponse":{"type":"object","properties":{"cwe":{"type":"string"},"total":{"type":"number"},"kev":{"type":"number"},"lastYear":{"type":"number"},"severity":{"type":"object","properties":{"critical":{"type":"number"},"high":{"type":"number"},"medium":{"type":"number"},"low":{"type":"number"},"none":{"type":"number"},"unknown":{"type":"number"}},"required":["critical","high","medium","low","none","unknown"]},"years":{"type":"array","items":{"type":"object","properties":{"year":{"type":"string"},"count":{"type":"number"}},"required":["year","count"]}},"latest":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"title":{"type":"string"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"score":{"type":["number","null"]},"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]},"kevAdded":{"type":["string","null"]}},"required":["id","published","updated","title","severity","score","vendor","product","kev","epss","kevAdded"]}},"exploited":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"title":{"type":"string"},"severity":{"type":"string","enum":["CRITICAL","HIGH","MEDIUM","LOW","NONE","UNKNOWN"]},"score":{"type":["number","null"]},"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]},"kevAdded":{"type":["string","null"]}},"required":["id","published","updated","title","severity","score","vendor","product","kev","epss","kevAdded"]}},"vendors":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"count":{"type":"number"}},"required":["name","count"]}}},"required":["cwe","total","kev","lastYear","severity","years","latest","exploited","vendors"]},"HealthResponse":{"type":"object","properties":{"status":{"type":"string","const":"ok"},"version":{"type":"string"}},"required":["status","version"]},"Error":{"type":"object","properties":{"error":{"type":"object","properties":{"code":{"type":"string","enum":["VALIDATION_FAILED","NOT_FOUND","RATE_LIMITED","UNAVAILABLE","INTERNAL"]},"message":{"type":"string"},"requestId":{"type":"string"}},"required":["code","message"]}},"required":["error"]}}}}