Known vulnerabilities, exploited-in-the-wild status and exploit probability for software packages and CVEs.
payments ON MAINNET (real money) · 8 live endpoints
| Endpoint | Price | What it answers |
|---|---|---|
GET /epss-score | $0.02 | EPSS exploit-probability score and percentile for up to 10 CVEs, ranked, with a high/elevated/low verdict. |
GET /kev-check | $0.02 | Is a CVE in CISA's Known Exploited Vulnerabilities catalog? Date added, due date, ransomware use and required action. |
GET /kev-recent | $0.02 | CVEs CISA added to the Known Exploited Vulnerabilities catalog in the last 1-90 days, newest first, with vendor and product. |
GET /kev-vendor | $0.02 | Exploited-vulnerability record of a vendor in CISA KEV: total CVEs, products, ransomware use and latest additions. |
GET /vuln-advisory | $0.02 | One security advisory by GHSA or CVE id: severity, affected packages and ranges, fixed versions and exploited flag. |
GET /vuln-batch | $0.05 | Check up to 10 package versions at once for known vulnerabilities: list as npm:[email protected],PyPI:[email protected]. |
GET /vuln-cve | $0.03 | Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS exploit probability and advisory severity. |
GET /vuln-package | $0.02 | Known vulnerabilities for an exact package version (npm, PyPI, Go, Maven...): fixed version, exploited-in-the-wild flag. |
GET /catalog returns this list as JSON. Activity hub · uptime.
Vulnerability data computed from OSV.dev, the CISA Known Exploited Vulnerabilities catalog (CC0) and FIRST EPSS scores, provided as is, with no warranty of completeness or timeliness. Absence of a known advisory is not evidence of safety. Not security, legal or compliance advice; verify against the vendor advisory before acting. EPSS is provided by FIRST (first.org/epss). Every paid response carries a disclaimer field.