Skip to content
J·BJon BishopIndependent growth marketer

Developer ecosystems · Government vulnerability database/API

NIST National Vulnerability Database CVE API: coverage and access

Product security intelligence, vulnerability exposure and patch prioritization

What it covers

Geography and granularity

Geography: Global products and software

Granularity: CVE, CPE, vendor/product/version and severity fields

Source type: Government vulnerability database/API

Potential use

Product security intelligence, vulnerability exposure and patch prioritization

Access and cost

REST API

API key optional with documented rate benefits

Cost: Public API; key optional; verify current limits

Update cadence: NVD documents modified and published timestamps; updates as CVEs change

Interpret carefully

Limits that affect the decision

CPE matching and NVD enrichment can be incomplete or delayed

NVD documents modified and published timestamps; updates as CVEs change

This record summarizes source documentation; Jon Bishop did not conduct an independent audit of the underlying dataset.

Prefer to write? Send Jon a message.