cve.meenan.dev

{
  "type": "object",
  "properties": {
    "sort": {
      "type": "string",
      "enum": [
        "published",
        "updated",
        "score",
        "cve"
      ],
      "description": "Defaults to published, newest first."
    },
    "limit": {
      "type": "integer",
      "description": "How many records to list. 1-500."
    },
    "text": {
      "type": "string",
      "description": "Full-text search over CVE descriptions and titles. Words are ANDed; use it for topics (\"buffer overflow\"), never for a vendor or product name, which have their own fields."
    },
    "vendor": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Exact vendor names."
    },
    "product": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Exact product names."
    },
    "cna": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Exact CNA (assigner) names."
    },
    "cwe": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "CWE ids, e.g. \"CWE-787\"."
    },
    "host": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Reference hostnames, e.g. \"github.com\"."
    },
    "severity": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "NONE",
          "LOW",
          "MEDIUM",
          "HIGH",
          "CRITICAL"
        ]
      },
      "description": "CVSS severity bands."
    },
    "cvssVersion": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "v2.0",
          "v3.0",
          "v3.1",
          "v4.0"
        ]
      }
    },
    "ssvcExploitation": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "none",
          "poc",
          "active",
          "not assessed"
        ]
      },
      "description": "CISA SSVC exploitation state. \"not assessed\" is its own value and covers about half the corpus — it is not the same as \"none\"."
    },
    "ssvcAutomatable": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "yes",
          "no",
          "not assessed"
        ]
      }
    },
    "ssvcImpact": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "partial",
          "total",
          "not assessed"
        ]
      }
    },
    "kev": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "in kev",
          "not in kev"
        ]
      },
      "description": "Membership of CISA's Known Exploited Vulnerabilities catalog."
    },
    "kevRansomware": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "known",
          "unknown",
          "not in kev",
          "not stated"
        ]
      }
    },
    "scoreMin": {
      "type": "number",
      "description": "Minimum CVSS base score, 0-10."
    },
    "scoreMax": {
      "type": "number",
      "description": "Maximum CVSS base score, 0-10."
    },
    "yearFrom": {
      "type": "integer",
      "description": "Earliest year in the CVE identifier — when it was reserved, not published."
    },
    "yearTo": {
      "type": "integer",
      "description": "Latest year in the CVE identifier — when it was reserved, not published."
    },
    "publishedFrom": {
      "type": "string",
      "description": "Published on or after this YYYY-MM-DD date."
    },
    "publishedTo": {
      "type": "string",
      "description": "Published on or before this YYYY-MM-DD date."
    },
    "updatedFrom": {
      "type": "string",
      "description": "Last updated on or after this YYYY-MM-DD date."
    },
    "updatedTo": {
      "type": "string",
      "description": "Last updated on or before this YYYY-MM-DD date."
    },
    "kevAddedFrom": {
      "type": "string",
      "description": "Added to KEV on or after this YYYY-MM-DD date."
    },
    "kevAddedTo": {
      "type": "string",
      "description": "Added to KEV on or before this YYYY-MM-DD date."
    },
    "kevDueFrom": {
      "type": "string",
      "description": "KEV remediation due on or after this YYYY-MM-DD."
    },
    "kevDueTo": {
      "type": "string",
      "description": "KEV remediation due on or before this YYYY-MM-DD."
    },
    "cveId": {
      "type": "string",
      "description": "One exact identifier, e.g. \"CVE-2021-44228\". For reading a record, prefer cve_detail."
    },
    "state": {
      "type": "string",
      "enum": [
        "published",
        "rejected",
        "all"
      ],
      "description": "Which records to count. Defaults to \"published\"; REJECTED identifiers are withdrawn, not vulnerabilities, and including them inflates every count."
    }
  }
}