CVE Lookup by ID (All Sources)

{
  "type": "object",
  "required": [
    "cve_id"
  ],
  "properties": {
    "cve_id": {
      "type": "string",
      "pattern": "^CVE-[0-9]{4}-[0-9]{4,}$",
      "examples": [
        "CVE-2014-0160"
      ],
      "description": "The exact CVE id, such as CVE-2014-0160."
    },
    "source": {
      "enum": [
        "all"
      ],
      "type": "string",
      "default": "all",
      "description": "Which databases to search. Only all is offered."
    },
    "maxItems": {
      "enum": [
        "20"
      ],
      "type": "string",
      "default": "20",
      "description": "The most records to return, as a string. Only 20 is offered."
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "count": {
      "type": "number",
      "description": "How many records came back."
    },
    "items": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "description": "The CVE id."
          },
          "url": {
            "type": "string",
            "description": "The record's own page link."
          },
          "cwes": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "CWE weakness ids, such as CWE-502."
          },
          "type": {
            "type": "string",
            "description": "The record type: cve for a database record, advisory for an advisory."
          },
          "cveId": {
            "type": "string",
            "description": "The CVE id (advisory records)."
          },
          "ghsaId": {
            "type": "string",
            "description": "The GitHub advisory id (advisory records)."
          },
          "source": {
            "type": "string",
            "description": "Where the record comes from: nvd or github."
          },
          "vector": {
            "type": "string",
            "description": "The CVSS vector string (database records)."
          },
          "summary": {
            "type": "string",
            "description": "A one-line summary (advisory records)."
          },
          "updated": {
            "type": "string",
            "description": "When the advisory was last updated (advisory records)."
          },
          "severity": {
            "type": "string",
            "description": "The severity label, such as CRITICAL."
          },
          "cvssScore": {
            "type": "number",
            "description": "The CVSS base score, 0 to 10."
          },
          "published": {
            "type": "string",
            "description": "When the record was published."
          },
          "ecosystems": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Affected package ecosystems, such as maven (advisory records)."
          },
          "references": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Reference links (database records)."
          },
          "cvssVersion": {
            "type": "string",
            "description": "The CVSS version the score uses, such as V31 (database records)."
          },
          "description": {
            "type": "string",
            "description": "The vulnerability description; on advisory records, the advisory text (it can be cut short) in Markdown."
          },
          "lastModified": {
            "type": "string",
            "description": "When the record was last modified (database records)."
          }
        }
      },
      "description": "One record per source: a National Vulnerability Database record (`source` nvd) and, when one exists, a GitHub security advisory (`source` github)."
    }
  },
  "description": "The records found for the CVE id."
}