Open Data

Published OpenJS CVE records originate at MITRE. This site re-publishes the same information as a public, unauthenticated cache so downstream consumers (dashboards, scanners, alerting tools) can read it without going through MITRE's API for every request.

The cache is rebuilt on each site deploy, which is driven by an hourly refresh from MITRE. In practice that means a newly-published advisory appears here within roughly an hour of being published at MITRE; in between deploys the feeds are static.

Endpoints

Live data

If you need real-time CVE data, query MITRE's public read endpoint directly. No authentication is required:

curl https://cveawg.mitre.org/api/cve/CVE-YYYY-NNNNN

Our feeds carry the same record content, just on the website's build cadence.