Cyber Vulnerability Intelligence Hub 🛡️

CVE intelligence from four authoritative open sources in one Actor — CISA KEV (what's actively exploited), NVD (full CVE detail + CVSS), OSV.dev (open-source package vulnerabilities) and EPSS (probability of exploitation). Look up CVEs, search, track known-exploited threats, or scan a dependency. No API key.

Vulnerability data is scattered across NVD, CISA, EPSS and package advisory databases. This Actor fuses them into one clean, structured feed — so for any CVE you instantly see its severity, whether it's being actively exploited, how likely it is to be exploited, and whether ransomware crews are using it.

---

Five modes

Mode	What it does
lookup	Give one or more CVE IDs → fused NVD detail + CVSS + CWE + CISA KEV status + EPSS score.
search	Search NVD by keyword, CVSS severity, CPE or publish date — each result enriched with KEV + EPSS.
kev	The CISA Known Exploited Vulnerabilities catalog — filter by vendor, product, ransomware use or date. The "patch these now" list.
package	Give a package + ecosystem (npm, PyPI, Go, Maven…) → the vulnerabilities affecting it, from OSV.dev (includes GitHub advisories).
digest	One summary row over the KEV catalog: top vendors/products, ransomware-linked count, newest additions, highest-EPSS threats.

What you get per vulnerability

Field	Example
cve_id	CVE-2021-44228 (Log4Shell)
cvss_score · cvss_severity · cvss_vector	10.0 · CRITICAL · CVSS:3.1/AV:N/…
known_exploited · kev_date_added · kev_due_date	true · 2021-12-10 · 2021-12-24
ransomware_use	Known
epss_score · epss_percentile	0.99999 · 1.0 (near-certain exploitation)
cwes	CWE-20, CWE-917
reference_urls · nvd_url	…

Examples

Look up Log4Shell + Heartbleed, fully enriched

{ "mode": "lookup", "cves": ["CVE-2021-44228", "CVE-2014-0160"] }

All CRITICAL Fortinet CVEs

{ "mode": "search", "keyword": "Fortinet", "severity": "CRITICAL" }

Everything ransomware crews are actively exploiting

{ "mode": "kev", "ransomwareOnly": true }

Scan an npm package for known vulnerabilities

{ "mode": "package", "package": "lodash", "ecosystem": "npm" }

Run it on a schedule

Schedule a daily kev or digest run to track newly-exploited vulnerabilities the moment CISA adds them, feed a patch-prioritisation workflow, or monitor your dependencies with package mode.

Data sources & notes

• CISA KEV — Known Exploited Vulnerabilities catalog (US CISA), public JSON feed.
• NVD — NIST National Vulnerability Database CVE API. Public and keyless, but rate-limited (~5 requests / 30s) — the Actor throttles automatically, so large lookup lists run slowly; search returns many CVEs in one request.
• OSV.dev — Open Source Vulnerabilities (Google), covering npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet and more, including GitHub Security Advisories.
• EPSS — Exploit Prediction Scoring System (FIRST.org): probability (0–1) a CVE will be exploited in the next 30 days.
• All data is public, non-personal vulnerability intelligence. No API key required.

---

Keywords

CVE, vulnerability, CVE lookup, CVE API, NVD, National Vulnerability Database, CISA KEV, known exploited vulnerabilities, EPSS, exploit prediction, CVSS, OSV, open source vulnerabilities, dependency scanning, package vulnerabilities, GHSA, GitHub advisories, ransomware, threat intelligence, vulnerability management, patch prioritization, security, cybersecurity, no API key.