NIST NVD CVE Feed
Pricing
Pay per usage
NIST NVD CVE Feed
Fetch CVEs from the public NIST National Vulnerability Database (NVD) API 2.0. Filter by keyword, CVE ID, CVSS v3 severity, and publication date window. Structured JSON with scores, CWEs, and NVD detail links. No API key required (optional key for higher rate limits).
Pricing
Pay per usage
Rating
0.0
(0)
Developer
Yunus Vurgun
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
22 days ago
Last modified
Categories
Security
Limited permissionsShare
Fetches CVE records from the NIST National Vulnerability Database (NVD) API 2.0 and saves structured rows to the Actor dataset.
No API key required for small runs (optional free key raises rate limits). Not Turkey/Türkiye-specific. Useful for security monitoring, vulnerability research, and newsroom/compliance workflows.
Also by this publisher
- Federal Register Notices — US Federal Register documents via the public API
- SEC EDGAR Company Filings — 10-K / 10-Q / 8-K / Form 4 metadata via public SEC APIs
- openFDA Drug / Device / Food Recalls — FDA enforcement/recall reports via public openFDA API
Input
| Field | Description |
|---|---|
keyword | Optional NVD keywordSearch (e.g. openssl). |
cveIds | Optional exact CVE IDs. When set, fetches those IDs directly. |
cvssV3Severity | Optional: LOW, MEDIUM, HIGH, CRITICAL. |
pubStartDate / pubEndDate | Publication window (YYYY-MM-DD). Defaults to last 7 days (UTC). NVD allows at most 120 days. |
maxItems | Cap on saved rows (1–2000, default 50). |
resultsPerPage | Page size 1–100 (default 50). |
requestDelayMs | Pause between pages (default 6500; unauthenticated ~5 req/30s). |
nvdApiKey | Optional free key from nvd.nist.gov (secret). |
Output
Each dataset item includes: cveId, published, lastModified, vulnStatus, description, cvssVersion, cvssScore, cvssSeverity, cvssVector, cwes, references, nvdUrl, sourceIdentifier.
Local run
cd nist-nvd-cvespython3 -m venv .venv && .venv/bin/pip install -r requirements.txtapify run --purge -i '{"cvssV3Severity":"CRITICAL","maxItems":5,"requestDelayMs":1000}'
Rate limits
Without an API key, NIST limits unauthenticated clients to about 5 requests per 30 seconds. Use the default delay, keep maxItems modest for demos, or supply a free nvdApiKey.
Sources
- NVD CVE API 2.0: https://services.nvd.nist.gov/rest/json/cves/2.0
- NVD developer docs: https://nvd.nist.gov/developers/vulnerabilities
- Apify publishing: https://docs.apify.com/platform/actors/publishing