CVE Feed: NVD, CISA KEV, GitHub Advisories Merged
Under maintenancePricing
$0.09 / 1,000 vulnerability records
A CVE feed that merges NIST NVD, CISA KEV, and GitHub Advisories into one deduplicated record per CVE, with the source URL on every row. Official public data only, copied without inference, billed only per delivered record. An unchanged incremental run bills nothing.
Which feeds to pull. Valid values: nvd (NIST CVE), cisa-kev (CISA Known Exploited Vulnerabilities), ghsa (GitHub Security Advisories). Unknown values are ignored.
[ "nvd", "cisa-kev", "ghsa"]How far back to pull on the first run, before the incremental cursor exists. Later runs only fetch what changed since the last run.
Drop records below this CVSS severity. Known-exploited (CISA KEV) records always pass regardless, because active exploitation outranks the score.
Return only vulnerabilities CISA lists as actively exploited in the wild. High-signal, low-volume.
Safety cap on billed records per run. Anything beyond it is written to the free 'rejected' dataset, never billed, so nothing is lost.
A free NIST NVD API key raises the rate limit (50 vs 5 requests / 30s) and makes large first runs much faster. Not required.