What it returns
One call returns a full picture of a vulnerability, merged from four official sources: - **NVD** (National Vulnerability Database): description, CVSS score, severity and vector, CWE, and affected vendors, products and version ranges - **CISA KEV:** whether it is **known to be exploited in the wild**, the date it was added, the federal remediation due date, and any ransomware use - **EPSS** (FIRST.org): the **probability it will be exploited** in the next 30 days, with its percentile - **OSV:** vulnerabilities in **open-source packages** (npm, PyPI, Maven, Go, NuGet, crates.io, RubyGems, Packagist and more), with fixed versions There are three ways to query: **CVE IDs**, **keywords** (with an optional "published in the last N days" filter), and **package@version** checks. You can filter to known-exploited vulnerabilities only, or set a minimum CVSS score. Use cases: vulnerability triage, patch prioritization, dependency audits, threat-intel feeds and security dashboards. This product uses data from the NVD API but is not endorsed or certified by the NVD.
Request
POST https://api.pushbuild.com/cve-vulnerability-lookup/run with a JSON body. Send your key in the X-API-Key header.
| Field | Type | Description |
|---|---|---|
cveIds | list of strings | CVE identifiers to look up, e.g. CVE-2021-44228. |
keywords | list of strings | Search CVE descriptions, e.g. a product name such as 'fortinet' or 'confluence'. |
packages | list of strings | Open-source packages as ecosystem:name@version (version optional), e.g. npm:lodash@4.17.15, pypi:django@3.2.0, maven:org.apache.logging.log4j:log4j-core@2.14.1. |
publishedWithinDays | integer | For keyword searches, only CVEs published in the last N days (max 120). |
onlyKnownExploited | boolean | Return only vulnerabilities on the CISA Known Exploited Vulnerabilities list. Default: false. |
minCvssScore | number | Drop results below this CVSS base score. |
maxItems | integer | Maximum items to return (1-500). Default: 100. |
Example
curl -X POST https://api.pushbuild.com/cve-vulnerability-lookup/run \
-H "X-API-Key: YOUR_KEY" \
-H "Content-Type: application/json" \
-d '{"cveIds": ["CVE-2021-44228"], "maxItems": 20}'Response
{"count": 20, "truncated": false, "seconds": 1.4, "items": [ { ... } ]}Each call returns up to 500 items. Records that fail validation or are not found are flagged in the items and not charged.
Pricing
Pay only for results returned: $0.40 per 1,000 vulnerabilitys. No charge for errors or empty searches.
Related APIs
Academic Papers Search API
Search scholarly papers across Crossref (150M+ works), arXiv and PubMed in one run.
Article & Web Page to Markdown API
Turn any URLs into clean, Markdown, text or JSON.
Book Search API
Search millions of books by keyword, title, author, subject or ISBN, plus author lookup.
College Scorecard: US Colleges, Costs, Earnings by Major API
Every US college from the Department of Education College Scorecard: admission rate, SAT/ACT, tuition, net price, completion and retention, median debt and graduates' earnings, plus program-level (major) debt and earnings 1 to 5 years after graduation..
Currency Exchange Rates API
Official European Central Bank reference exchange rates for 30+ currencies, daily since 1999.
DexScreener Scraper API
Real-time DEX pair data from DexScreener for any token, pair or search: price, liquidity, FDV, market cap, volume, buys and sells, price change, socials.
Tell us what you need built.
Questions about this API, higher volumes, or a data source you need that we don't cover yet.
hello@pushbuild.com