{"slug":"api-webintel-api-workers-dev-api-security-cisa-known-exploit-aa803e","title":"CISA's Known Exploited Vulnerabilities catalog (public JSON)","host":"api.webintel-api.workers.dev","method":"GET","resource":"https://api.webintel-api.workers.dev/api/security/cisa-known-exploits","category":"commerce","description":"CISA's Known Exploited Vulnerabilities catalog (public JSON). With cveId: whether that CVE is on the list, with vendor, product, date added, federal due date, required action and ransomware-use flag. Without it: catalog size, release date and the newest additions (up to 50). Listing means exploitati","price_listed":0.002,"price_asked":0.002,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":30,"reported_calls_30d":1,"reported_payers_30d":1,"networks":["eip155:10","eip155:137","eip155:143","eip155:42161","eip155:42220","eip155:480","eip155:5042","eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","stellar:pubnet","xrpl:0"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"method":"GET","queryParams":{"cveId":"CVE-2021-44228"},"type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"cveId":{"description":"CVE identifier to look up (optional)","type":"string"},"limit":{"description":"How many newest additions to list when no cveId is given, 1 to 50 (default 10)","type":"string"}},"required":[],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-24","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.002,"price_match":true,"latency_ms":30,"error":null}],"description_full":"CISA's Known Exploited Vulnerabilities catalog (public JSON). With cveId: whether that CVE is on the list, with vendor, product, date added, federal due date, required action and ransomware-use flag. Without it: catalog size, release date and the newest additions (up to 50). Listing means exploitation was reported, not a risk score.","last_updated":"2026-10-24T01:47:30.303Z","schemes":["exact"]}