CVE vulnerability lookup
CVE vulnerability lookup. Returns security vulnerability records by CVE id or keyword from the NIST National Vulnerability Database and GitHub Security Advisories, each with CVSS score, severity, CWE weakness class, affected products, and references, filterable by severity and source. For vulnerability triage and dependency risk checks. Keyless.
10000 (raw units)
price
30
calls / 30d
3
unique payers
2026-09-16
updated
Provider
api.kadec0.xyz · discovered, not yet claimed by its owner
Payment (x402 accepts[])
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0x4df66B6c140778fe0717880A7c6dDE5Ea53AcDeA",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "10000",
"maxTimeoutSeconds": 300
}
]Output schema
{
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"keyword": "log4j",
"severity": "critical"
},
"type": "http"
},
"output": {
"example": {
"count": 1,
"items": [
{
"cvssScore": 10,
"cwes": [
"CWE-502"
],
"id": "CVE-2021-44228",
"severity": "CRITICAL",
"source": "nvd",
"type": "cve",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44228"
}
]
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET",
"HEAD",
"DELETE"
],
"type": "string"
},
"queryParams": {
"anyOf": [
{
"required": [
"cve_id"
]
},
{
"required": [
"keyword"
]
}
],
"properties": {
"cve_id": {
"description": "exact CVE id, e.g. CVE-2021-44228",
"type": "string"
},
"keyword": {
"description": "free-text search",
"type": "string"
},
"maxItems": {
"default": "20",
"type": "string"
},
"severity": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"source": {
"default": "all",
"enum": [
"nvd",
"github",
"all"
],
"type": "string"
}
},
"required": [],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
}Use it
curl
curl "https://api.kadec0.xyz/v1/cve" # -> 402 Payment Required, accepts[] lists how to pay # retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paid
JavaScript
const res = await fetch("https://api.kadec0.xyz/v1/cve");
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}Python
import httpx
res = httpx.get("https://api.kadec0.xyz/v1/cve")
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerMachine-readable
Everything on this page is also available as clean JSON at /resources/319.json, and this resource appears in /discovery/resources and /discovery/search.