About the data

VulnDB is free and open. There is no account, no rate limit and nothing to sign up for. It is published as a static data set, rebuilt from a feed that refreshes every few minutes.

Where it comes from

NVD

CVE records, CVSS scoring and CWE classification.

OSV

Ecosystem advisories and affected package version ranges.

CISA KEV

Confirmed in-the-wild exploitation and federal deadlines.

EPSS

Daily probability that a vulnerability will be exploited.

Cloudanix

The plain-language analysis on each page.

How current is it?

Last published Sep 27, 2026, build 20260927T185001Z-delta. Scores from EPSS and CISA KEV refresh daily; vulnerability records and analysis refresh when the underlying record changes.

Using the data

The same JSON these pages are built from will be published as a public, anonymous API. Documentation lands with it.