{"openapi":"3.1.0","info":{"title":"Vulnerability Intelligence","version":"1.0.0","description":"Known vulnerabilities, exploited-in-the-wild status and exploit probability for software packages and CVEs, computed from OSV.dev, the CISA Known Exploited Vulnerabilities catalog and FIRST's EPSS scores. One call, one computed answer, no accounts or API keys. Machine-payable over x402.","x-guidance":"Vulnerability Intelligence answers one question per call about software risk: does this package version have known advisories and what is the fixed version (/vuln-package, /vuln-batch), how urgently should this CVE be patched (/vuln-cve gives a P0 to P3 priority from exploited-in-the-wild status and exploit probability), is it in CISA's actively exploited catalog (/kev-check), what was newly added (/kev-recent). Each paid GET returns a computed verdict (such as VULNERABLE_HIGH, ACTIVELY_EXPLOITED or P0_PATCH_NOW) with the reasons, the source and what was NOT checked. NO_ADVISORIES_FOUND means no advisory exists in OSV for that exact version, not that the software is safe. A verdict of UNVERIFIED means a lookup failed: treat it as unknown. Not security advice for any specific system. No account or key: pay per call in USDC over x402."},"servers":[{"url":"https://vuln-intel.x402tookit.com"}],"paths":{"/epss-score":{"get":{"operationId":"epss_score","summary":"EPSS exploit-probability score and percentile for up to 10 CVEs, ranked, with a high/elevated/low verdict.","description":"EPSS exploit-probability score and percentile for up to 10 CVEs, ranked, with a high/elevated/low verdict.","tags":["epss","cve","exploit-probability"],"parameters":[{"name":"cves","in":"query","required":true,"description":"Comma-separated CVE ids, up to 10","schema":{"type":"string"}}],"responses":{"200":{"description":"The answer.","content":{"application/json":{"schema":{"type":"object","properties":{"verdict":{"type":["null","string"]},"summary":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"scores":{"type":["array","null"],"items":{"type":"object","properties":{"cve":{"type":["null","string"]},"probability":{"type":["null","number"]},"percentile":{"type":["null","number"]},"asOf":{"type":["null","string"]}}}},"thresholds":{"type":["null","object"],"properties":{"highAtLeast":{"type":["null","number"]},"elevatedAtLeast":{"type":["null","number"]}}},"degraded":{"type":["boolean","null"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"source":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"asOf":{"type":["null","string"]},"disclaimer":{"type":["null","string"]}}},"example":{"verdict":"HIGH_EXPLOIT_PROBABILITY","summary":"Highest: CVE-2021-44228 at 100% (percentile 100).","reasons":["EPSS estimates the chance of exploitation activity in the next 30 days; it is not severity.","EPSS is provided by FIRST (first.org/epss)."],"scores":[{"cve":"CVE-2021-44228","probability":0.99999,"percentile":1,"asOf":"2026-10-10"},{"cve":"CVE-2023-4863","probability":0.99979,"percentile":0.9998,"asOf":"2026-10-10"}],"thresholds":{"highAtLeast":0.5,"elevatedAtLeast":0.1},"degraded":false,"notChecked":["actual exploitation (see /kev-check)","severity"],"source":"FIRST EPSS","sourceUrl":"https://api.first.org/data/v1/epss","asOf":"2026-10-11T03:32:35.821Z","disclaimer":"Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting."}}}},"400":{"description":"A parameter was missing or out of range."},"402":{"description":"Payment Required"},"502":{"description":"The upstream source failed or timed out."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.0200"},"protocols":[{"x402":{"network":"eip155:8453","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/epss-score"}},{"x402":{"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/epss-score"}},{"x402":{"network":"eip155:137","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/epss-score"}},{"x402":{"network":"eip155:42161","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/epss-score"}}]}}},"/kev-check":{"get":{"operationId":"kev_check","summary":"Is a CVE in CISA's Known Exploited Vulnerabilities catalog? Date added, due date, ransomware use and required action.","description":"Is a CVE in CISA's Known Exploited Vulnerabilities catalog? Date added, due date, ransomware use and required action.","tags":["kev","cisa","cve"],"parameters":[{"name":"cve","in":"query","required":true,"description":"CVE id, e.g. CVE-2021-44228","schema":{"type":"string"}}],"responses":{"200":{"description":"The answer.","content":{"application/json":{"schema":{"type":"object","properties":{"verdict":{"type":["null","string"]},"summary":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"cve":{"type":["null","string"]},"vendor":{"type":["null","string"]},"product":{"type":["null","string"]},"name":{"type":["null","string"]},"dateAdded":{"type":["null","string"]},"dueDate":{"type":["null","string"]},"ransomwareUse":{"type":["null","string"]},"cwes":{"type":["array","null"],"items":{"type":"string"}},"catalogVersion":{"type":["null","string"]},"degraded":{"type":["boolean","null"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"source":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"asOf":{"type":["null","string"]},"disclaimer":{"type":["null","string"]}}},"example":{"verdict":"IN_KEV","summary":"CVE-2021-44228 IS exploited in the wild per CISA: Apache Log4j2, added 2021-12-10, federal due date 2021-12-24.","reasons":["Known to be used in ransomware campaigns.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using "],"cve":"CVE-2021-44228","vendor":"Apache","product":"Log4j2","name":"Apache Log4j2 Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2021-12-24","ransomwareUse":"Known","cwes":["CWE-20","CWE-400","…1 more"],"catalogVersion":"2026.10.08","degraded":false,"notChecked":["whether you are affected"],"source":"CISA KEV catalog (CC0)","sourceUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","asOf":"2026-10-11T03:32:36.342Z","disclaimer":"Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting."}}}},"400":{"description":"A parameter was missing or out of range."},"402":{"description":"Payment Required"},"502":{"description":"The upstream source failed or timed out."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.0200"},"protocols":[{"x402":{"network":"eip155:8453","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-check"}},{"x402":{"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-check"}},{"x402":{"network":"eip155:137","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-check"}},{"x402":{"network":"eip155:42161","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-check"}}]}}},"/kev-recent":{"get":{"operationId":"kev_recent","summary":"CVEs CISA added to the Known Exploited Vulnerabilities catalog in the last 1-90 days, newest first, with vendor and product.","description":"CVEs CISA added to the Known Exploited Vulnerabilities catalog in the last 1-90 days, newest first, with vendor and product.","tags":["kev","cisa","threat-feed"],"parameters":[{"name":"days","in":"query","required":false,"description":"Lookback days, 1 to 90, default 14","schema":{"type":"integer"}}],"responses":{"200":{"description":"The answer.","content":{"application/json":{"schema":{"type":"object","properties":{"verdict":{"type":["null","string"]},"summary":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"sinceDate":{"type":["null","string"]},"count":{"type":["null","number"]},"catalogVersion":{"type":["null","string"]},"byVendor":{"type":["null","object"],"properties":{"ISC":{"type":["null","number"]},"Apache":{"type":["null","number"]},"Strapi":{"type":["null","number"]},"ONLYOFFICE":{"type":["null","number"]},"ProFTPD":{"type":["null","number"]},"Citrix":{"type":["null","number"]},"Zammad GmbH":{"type":["null","number"]},"Fortinet":{"type":["null","number"]},"Cisco":{"type":["null","number"]},"Apple":{"type":["null","number"]},"MikroTik":{"type":["null","number"]},"Microsoft":{"type":["null","number"]},"WordPress":{"type":["null","number"]},"WSO2":{"type":["null","number"]},"Adobe":{"type":["null","number"]},"Arista":{"type":["null","number"]},"F5":{"type":["null","number"]},"Check Point":{"type":["null","number"]},"Zyxel":{"type":["null","number"]},"Linux":{"type":["null","number"]},"Google":{"type":["null","number"]},"Acronis":{"type":["null","number"]},"ConnectWise":{"type":["null","number"]},"JFrog":{"type":["null","number"]},"GitLab":{"type":["null","number"]}}},"added":{"type":["array","null"],"items":{"type":"object","properties":{"cve":{"type":["null","string"]},"vendor":{"type":["null","string"]},"product":{"type":["null","string"]},"name":{"type":["null","string"]},"dateAdded":{"type":["null","string"]},"dueDate":{"type":["null","string"]},"ransomwareUse":{"type":["null","string"]}}}},"degraded":{"type":["boolean","null"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"source":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"asOf":{"type":["null","string"]},"disclaimer":{"type":["null","string"]}}},"example":{"verdict":"NEW_EXPLOITED_CVES","summary":"34 CVE(s) added to KEV since 2026-09-11; most active vendor Citrix.","reasons":["Each entry has been confirmed exploited in the wild by CISA."],"sinceDate":"2026-09-11","count":34,"catalogVersion":"2026.10.08","byVendor":{"ISC":1,"Apache":1,"Strapi":1,"ONLYOFFICE":1,"ProFTPD":1,"Citrix":3,"Zammad GmbH":2,"Fortinet":1,"Cisco":3,"Apple":1,"MikroTik":1,"Microsoft":1,"WordPress":1,"WSO2":1,"Adobe":1,"Arista":1,"F5":1,"Check Point":2,"Zyxel":1,"Linux":3,"Google":1,"Acronis":1,"ConnectWise":1,"JFrog":2,"GitLab":1},"added":[{"cve":"CVE-2015-5477","vendor":"ISC","product":"BIND","name":"ISC BIND Data Processing Errors Vulnerability","dateAdded":"2026-10-08","dueDate":"2026-10-11","ransomwareUse":"Unknown"},{"cve":"CVE-2016-3081","vendor":"Apache","product":"Struts","name":"Apache Struts Command Injection Vulnerability","dateAdded":"2026-10-08","dueDate":"2026-10-11","ransomwareUse":"Unknown"}],"degraded":false,"notChecked":["whether you run the affected products"],"source":"CISA KEV catalog (CC0)","sourceUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","asOf":"2026-10-11T03:32:36.599Z","disclaimer":"Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting."}}}},"400":{"description":"A parameter was missing or out of range."},"402":{"description":"Payment Required"},"502":{"description":"The upstream source failed or timed out."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.0200"},"protocols":[{"x402":{"network":"eip155:8453","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-recent"}},{"x402":{"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-recent"}},{"x402":{"network":"eip155:137","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-recent"}},{"x402":{"network":"eip155:42161","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-recent"}}]}}},"/kev-vendor":{"get":{"operationId":"kev_vendor","summary":"Exploited-vulnerability record of a vendor in CISA KEV: total CVEs, products, ransomware use and latest additions.","description":"Exploited-vulnerability record of a vendor in CISA KEV: total CVEs, products, ransomware use and latest additions.","tags":["kev","vendor-risk","cisa"],"parameters":[{"name":"vendor","in":"query","required":true,"description":"Vendor name or part, e.g. Microsoft, Fortinet, Ivanti","schema":{"type":"string"}}],"responses":{"200":{"description":"The answer.","content":{"application/json":{"schema":{"type":"object","properties":{"verdict":{"type":["null","string"]},"summary":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"vendorsMatched":{"type":["array","null"],"items":{"type":"string"}},"kevCves":{"type":["null","number"]},"ransomwareUse":{"type":["null","number"]},"topProducts":{"type":["array","null"],"items":{"type":"object","properties":{"product":{"type":["null","string"]},"cves":{"type":["null","number"]}}}},"latest":{"type":["array","null"],"items":{"type":"object","properties":{"cve":{"type":["null","string"]},"product":{"type":["null","string"]},"dateAdded":{"type":["null","string"]}}}},"thresholds":{"type":["null","object"],"properties":{"frequentAt":{"type":["null","number"]},"severalAt":{"type":["null","number"]}}},"degraded":{"type":["boolean","null"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"source":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"asOf":{"type":["null","string"]},"disclaimer":{"type":["null","string"]}}},"example":{"verdict":"FREQUENTLY_EXPLOITED_VENDOR","summary":"Fortinet: 31 CVE(s) in KEV across 10 product(s); 14 used in ransomware.","reasons":["Count reflects exploited CVEs only, not all vulnerabilities, and scales with how widely a vendor's products are deployed."],"vendorsMatched":["Fortinet"],"kevCves":31,"ransomwareUse":14,"topProducts":[{"product":"FortiOS","cves":9},{"product":"Multiple Products","cves":6}],"latest":[{"cve":"CVE-2026-104286","product":"FortiMail","dateAdded":"2026-10-01"},{"cve":"CVE-2025-25249","product":"Multiple Products","dateAdded":"2026-09-09"}],"thresholds":{"frequentAt":20,"severalAt":5},"degraded":false,"notChecked":["vulnerabilities not exploited","vendor patching speed"],"source":"CISA KEV catalog (CC0)","sourceUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","asOf":"2026-10-11T03:32:36.857Z","disclaimer":"Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting."}}}},"400":{"description":"A parameter was missing or out of range."},"402":{"description":"Payment Required"},"502":{"description":"The upstream source failed or timed out."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.0200"},"protocols":[{"x402":{"network":"eip155:8453","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-vendor"}},{"x402":{"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-vendor"}},{"x402":{"network":"eip155:137","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-vendor"}},{"x402":{"network":"eip155:42161","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/kev-vendor"}}]}}},"/vuln-advisory":{"get":{"operationId":"vuln_advisory","summary":"One security advisory by GHSA or CVE id: severity, affected packages and ranges, fixed versions and exploited flag.","description":"One security advisory by GHSA or CVE id: severity, affected packages and ranges, fixed versions and exploited flag.","tags":["advisory","ghsa","cve"],"parameters":[{"name":"id","in":"query","required":true,"description":"Advisory id: GHSA-xxxx-xxxx-xxxx or CVE-YYYY-NNNN","schema":{"type":"string"}}],"responses":{"200":{"description":"The answer.","content":{"application/json":{"schema":{"type":"object","properties":{"verdict":{"type":["null","string"]},"summary":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"id":{"type":["null","string"]},"aliases":{"type":["array","null"],"items":{"type":"string"}},"published":{"type":["null","string"]},"modified":{"type":["null","string"]},"severity":{"type":["null","string"]},"cvss":{"type":["array","null"],"items":{"type":"object","properties":{"type":{"type":["null","string"]},"vector":{"type":["null","string"]}}}},"cwes":{"type":["array","null"],"items":{"type":"string"}},"affected":{"type":["array","null"],"items":{"type":"object","properties":{"ecosystem":{"type":["null","string"]},"name":{"type":["null","string"]},"fixed":{"type":["array","null"],"items":{"type":"string"}},"introduced":{"type":["array","null"],"items":{"type":"string"}}}}},"references":{"type":["array","null"],"items":{"type":"object","properties":{"type":{"type":["null","string"]},"url":{"type":["null","string"]}}}},"degraded":{"type":["boolean","null"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"source":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"asOf":{"type":["null","string"]},"disclaimer":{"type":["null","string"]}}},"example":{"verdict":"SEVERITY_HIGH","summary":"GHSA-35jh-r3h4-6jhm: Command Injection in lodash Severity HIGH.","reasons":["Not in CISA KEV."],"id":"GHSA-35jh-r3h4-6jhm","aliases":["CVE-2021-23337","CVE-2026-4800","…1 more"],"published":"2021-05-06T16:05:51Z","modified":"2026-09-10T03:49:04.067984836Z","severity":"HIGH","cvss":[{"type":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}],"cwes":["CWE-77","CWE-94"],"affected":[{"ecosystem":"npm","name":"lodash","fixed":["4.17.21"],"introduced":["0"]},{"ecosystem":"npm","name":"lodash-es","fixed":["4.17.21"],"introduced":["0"]}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23337"},{"type":"WEB","url":"https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"}],"degraded":false,"notChecked":["whether your code is reachable","other advisory databases"],"source":"OSV.dev + CISA KEV","sourceUrl":"https://api.osv.dev","asOf":"2026-10-11T03:32:37.269Z","disclaimer":"Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting."}}}},"400":{"description":"A parameter was missing or out of range."},"402":{"description":"Payment Required"},"502":{"description":"The upstream source failed or timed out."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.0200"},"protocols":[{"x402":{"network":"eip155:8453","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-advisory"}},{"x402":{"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-advisory"}},{"x402":{"network":"eip155:137","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-advisory"}},{"x402":{"network":"eip155:42161","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-advisory"}}]}}},"/vuln-batch":{"get":{"operationId":"vuln_batch","summary":"Check up to 10 package versions at once for known vulnerabilities: list as npm:lodash@4.17.15,PyPI:requests@2.19.0.","description":"Check up to 10 package versions at once for known vulnerabilities: list as npm:lodash@4.17.15,PyPI:requests@2.19.0.","tags":["vulnerabilities","supply-chain","batch"],"parameters":[{"name":"packages","in":"query","required":true,"description":"Comma-separated ecosystem:name@version, up to 10","schema":{"type":"string"}}],"responses":{"200":{"description":"The answer.","content":{"application/json":{"schema":{"type":"object","properties":{"verdict":{"type":["null","string"]},"summary":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"checked":{"type":["null","number"]},"vulnerable":{"type":["null","number"]},"packages":{"type":["array","null"],"items":{"type":"object","properties":{"package":{"type":["null","string"]},"advisories":{"type":["null","number"]},"ids":{"type":["array","null"],"items":{"type":"string"}}}}},"degraded":{"type":["boolean","null"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"source":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"asOf":{"type":["null","string"]},"disclaimer":{"type":["null","string"]}}},"example":{"verdict":"SOME_VULNERABLE","summary":"3 of 3 package version(s) have known advisories.","reasons":["npm:lodash@4.17.15: 6 advisory(ies)","npm:express@4.19.2: 1 advisory(ies)","…1 more"],"checked":3,"vulnerable":3,"packages":[{"package":"npm:lodash@4.17.15","advisories":6,"ids":["GHSA-29mw-wpgm-hmr9","GHSA-35jh-r3h4-6jhm","…3 more"]},{"package":"npm:express@4.19.2","advisories":1,"ids":["GHSA-qw6h-vgh9-j6wx"]}],"degraded":false,"notChecked":["severity and exploit status per advisory (use /vuln-package for detail)","transitive dependencies","…1 more"],"source":"OSV.dev","sourceUrl":"https://api.osv.dev","asOf":"2026-10-11T03:32:37.729Z","disclaimer":"Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting."}}}},"400":{"description":"A parameter was missing or out of range."},"402":{"description":"Payment Required"},"502":{"description":"The upstream source failed or timed out."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.0500"},"protocols":[{"x402":{"network":"eip155:8453","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-batch"}},{"x402":{"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-batch"}},{"x402":{"network":"eip155:137","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-batch"}},{"x402":{"network":"eip155:42161","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-batch"}}]}}},"/vuln-cve":{"get":{"operationId":"vuln_cve","summary":"Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS exploit probability and advisory severity.","description":"Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS exploit probability and advisory severity.","tags":["cve","patch-priority","epss","kev"],"parameters":[{"name":"cve","in":"query","required":true,"description":"CVE id, e.g. CVE-2021-44228","schema":{"type":"string"}}],"responses":{"200":{"description":"The answer.","content":{"application/json":{"schema":{"type":"object","properties":{"verdict":{"type":["null","string"]},"summary":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"cve":{"type":["null","string"]},"inKev":{"type":["boolean","null"]},"kev":{"type":["null","object"],"properties":{"vendor":{"type":["null","string"]},"product":{"type":["null","string"]},"name":{"type":["null","string"]},"dateAdded":{"type":["null","string"]},"dueDate":{"type":["null","string"]},"ransomwareUse":{"type":["null","string"]},"requiredAction":{"type":["null","string"]}}},"epss":{"type":["null","object"],"properties":{"probability":{"type":["null","number"]},"percentile":{"type":["null","number"]},"asOf":{"type":["null","string"]}}},"advisorySeverity":{},"advisorySummary":{"type":["null","string"]},"thresholds":{"type":["null","object"],"properties":{"p1EpssAtLeast":{"type":["null","number"]},"p2EpssAtLeast":{"type":["null","number"]}}},"degraded":{"type":["boolean","null"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"source":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"asOf":{"type":["null","string"]},"disclaimer":{"type":["null","string"]}}},"example":{"verdict":"P0_PATCH_NOW","summary":"CVE-2021-44228: p0 patch now. In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).","reasons":["In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).","EPSS is provided by FIRST (first.org/epss).","…1 more"],"cve":"CVE-2021-44228","inKev":true,"kev":{"vendor":"Apache","product":"Log4j2","name":"Apache Log4j2 Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2021-12-24","ransomwareUse":"Known","requiredAction":"For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using "},"epss":{"probability":0.99999,"percentile":1,"asOf":"2026-10-10"},"advisorySeverity":null,"advisorySummary":"","thresholds":{"p1EpssAtLeast":0.5,"p2EpssAtLeast":0.1},"degraded":false,"notChecked":["whether you run the affected software","compensating controls","…2 more"],"source":"CISA KEV + FIRST EPSS + OSV.dev","sourceUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","asOf":"2026-10-11T03:32:38.137Z","disclaimer":"Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting."}}}},"400":{"description":"A parameter was missing or out of range."},"402":{"description":"Payment Required"},"502":{"description":"The upstream source failed or timed out."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.0300"},"protocols":[{"x402":{"network":"eip155:8453","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-cve"}},{"x402":{"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-cve"}},{"x402":{"network":"eip155:137","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-cve"}},{"x402":{"network":"eip155:42161","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-cve"}}]}}},"/vuln-package":{"get":{"operationId":"vuln_package","summary":"Known vulnerabilities for an exact package version (npm, PyPI, Go, Maven...): fixed version, exploited-in-the-wild flag.","description":"Known vulnerabilities for an exact package version (npm, PyPI, Go, Maven...): fixed version, exploited-in-the-wild flag.","tags":["vulnerabilities","supply-chain","osv"],"parameters":[{"name":"ecosystem","in":"query","required":true,"description":"npm, PyPI, Go, crates.io, Maven, NuGet, RubyGems, Packagist, Pub or Hex","schema":{"type":"string"}},{"name":"name","in":"query","required":true,"description":"Package name, e.g. lodash","schema":{"type":"string"}},{"name":"version","in":"query","required":true,"description":"Exact version, e.g. 4.17.15","schema":{"type":"string"}}],"responses":{"200":{"description":"The answer.","content":{"application/json":{"schema":{"type":"object","properties":{"verdict":{"type":["null","string"]},"summary":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"package":{"type":["null","string"]},"advisories":{"type":["null","number"]},"worstSeverity":{"type":["null","string"]},"exploitedInTheWild":{"type":["array","null"]},"upgradeToAtLeast":{"type":["null","string"]},"fixedVersionsListed":{"type":["array","null"],"items":{"type":"string"}},"top":{"type":["array","null"],"items":{"type":"object","properties":{"id":{"type":["null","string"]},"cves":{"type":["array","null"],"items":{"type":"string"}},"summary":{"type":["null","string"]},"severity":{"type":["null","string"]},"published":{"type":["null","string"]},"fixedIn":{"type":["array","null"],"items":{"type":"string"}}}}},"degraded":{"type":["boolean","null"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"source":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"asOf":{"type":["null","string"]},"disclaimer":{"type":["null","string"]}}},"example":{"verdict":"VULNERABLE_HIGH","summary":"lodash@4.17.15: 6 advisory(ies), worst severity HIGH. Lowest version that clears every listed advisory: 4.18.0.","reasons":["None of the CVEs is in the KEV catalog (checked against CISA's current list).","The 'upgrade to' version is the highest fixed version across advisories; confirm compatibility."],"package":"npm:lodash@4.17.15","advisories":6,"worstSeverity":"HIGH","exploitedInTheWild":[],"upgradeToAtLeast":"4.18.0","fixedVersionsListed":["4.17.19","4.17.21","…2 more"],"top":[{"id":"GHSA-35jh-r3h4-6jhm","cves":["CVE-2021-23337","CVE-2026-4800"],"summary":"Command Injection in lodash","severity":"HIGH","published":"2021-05-06T16:05:51Z","fixedIn":["4.17.21"]},{"id":"GHSA-p6mc-m468-83gw","cves":["CVE-2020-8203"],"summary":"Prototype Pollution in lodash","severity":"HIGH","published":"2020-07-15T19:15:48Z","fixedIn":["4.17.19"]}],"degraded":false,"notChecked":["whether your code reaches the vulnerable function","transitive dependencies","…1 more"],"source":"OSV.dev + CISA KEV","sourceUrl":"https://api.osv.dev","asOf":"2026-10-11T03:32:38.596Z","disclaimer":"Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting."}}}},"400":{"description":"A parameter was missing or out of range."},"402":{"description":"Payment Required"},"502":{"description":"The upstream source failed or timed out."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.0200"},"protocols":[{"x402":{"network":"eip155:8453","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-package"}},{"x402":{"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-package"}},{"x402":{"network":"eip155:137","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-package"}},{"x402":{"network":"eip155:42161","scheme":"exact","currency":"USDC","endpoint":"https://vuln-intel.x402tookit.com/vuln-package"}}]}}}}}