{ "openapi": "3.0.1", "info": { "title": "CVE & CISA KEV Vulnerability Feed (NVD + EPSS, daily alerts)", "description": "New CVEs from the NVD plus newly added CISA Known Exploited Vulnerabilities (KEV), enriched with CVSS, CWE, vendor/product and FIRST EPSS exploit probability. Filter by vendor, severity, CVSS, EPSS, CWE or keyword. 'New since last run' mode for daily alerts.", "version": "0.1", "x-build-id": "leSODqFj52ig7Gcv6" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/moment-data~cve-kev-vulnerability-feed/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-moment-data-cve-kev-vulnerability-feed", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/moment-data~cve-kev-vulnerability-feed/runs": { "post": { "operationId": "runs-sync-moment-data-cve-kev-vulnerability-feed", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/moment-data~cve-kev-vulnerability-feed/run-sync": { "post": { "operationId": "run-sync-moment-data-cve-kev-vulnerability-feed", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "mode": { "title": "Mode", "enum": [ "window", "sinceLastRun" ], "type": "string", "description": "window (default): everything in the lookback windows, no saved state. sinceLastRun: only records not delivered before for this State key; use this for daily or hourly schedules.", "default": "window" }, "eventTypes": { "title": "Event types", "type": "array", "description": "newCves: CVEs newly published in the NVD. kevAdded: CVEs newly added to the CISA Known Exploited Vulnerabilities catalog (actively exploited). updatedCves: older CVEs modified in the window (re-scored, new references, KEV flag), can be high volume.", "items": { "type": "string", "enum": [ "newCves", "kevAdded", "updatedCves" ], "enumTitles": [ "New CVEs (NVD)", "Added to CISA KEV", "Updated CVEs (NVD)" ] }, "default": [ "newCves", "kevAdded" ] }, "lookbackDays": { "title": "CVE lookback (days)", "minimum": 1, "maximum": 119, "type": "integer", "description": "Window for newCves / updatedCves (NVD publishes ~300-600 CVEs per day). Also the first-run window in sinceLastRun mode.", "default": 2 }, "kevLookbackDays": { "title": "KEV lookback (days)", "minimum": 1, "maximum": 119, "type": "integer", "description": "Window for kevAdded (CISA adds roughly 5-40 CVEs per month).", "default": 30 }, "vendors": { "title": "Vendors / products", "type": "array", "description": "Only CVEs whose vendor or product contains one of these (case-insensitive), e.g. microsoft, cisco, fortinet, apache, ivanti, wordpress, chrome. Matched against NVD CPE data, CNA affected-product data, KEV vendor/product and the description.", "items": { "type": "string" } }, "keywords": { "title": "Keywords in description", "type": "array", "description": "e.g. remote code execution, authentication bypass, SQL injection.", "items": { "type": "string" } }, "severities": { "title": "Severities", "type": "array", "description": "Empty = all. KEV records without a score yet are kept.", "items": { "type": "string", "enum": [ "CRITICAL", "HIGH", "MEDIUM", "LOW" ] } }, "minCvssScore": { "title": "Minimum CVSS base score", "minimum": 0, "maximum": 10, "type": "number", "description": "0 = no minimum. Uses NVD's score, or the CNA's score if NVD has not scored it yet (see cvssSource).", "default": 0 }, "minEpss": { "title": "Minimum EPSS probability (0-1)", "minimum": 0, "maximum": 1, "type": "number", "description": "Optional, e.g. 0.1 = 10% probability of exploitation in the next 30 days (FIRST EPSS). Brand-new CVEs often have no EPSS score until the next daily EPSS release. KEV records always pass." }, "cweIds": { "title": "CWE IDs", "type": "array", "description": "e.g. CWE-79, CWE-89, 787. Empty = all.", "items": { "type": "string" } }, "onlyKev": { "title": "Only CVEs in CISA KEV", "type": "boolean", "description": "Only known-exploited vulnerabilities (also applies to newCves and updatedCves).", "default": false }, "ransomwareOnly": { "title": "Only KEV with known ransomware use", "type": "boolean", "description": "Only CVEs CISA marks as used in ransomware campaigns.", "default": false }, "includeEpss": { "title": "Add EPSS scores", "type": "boolean", "description": "Adds FIRST EPSS probability and percentile to each record (free, no extra charge).", "default": true }, "includeUnscored": { "title": "Include CVEs without a CVSS score yet", "type": "boolean", "description": "Many new CVEs are published before anyone scores them.", "default": true }, "includeRejected": { "title": "Include rejected CVEs", "type": "boolean", "description": "CVE IDs marked REJECTED by their CNA.", "default": false }, "maxItems": { "title": "Max records per run", "minimum": 1, "maximum": 20000, "type": "integer", "description": "Hard cap on delivered records (also caps your spend). When several event types are on, KEV additions get a fair share first. Default is small so a first run is quick and cheap.", "default": 30 }, "stateKey": { "title": "State key", "type": "string", "description": "Name of the saved feed for sinceLastRun mode. Use one key per schedule.", "default": "default" } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } } } } } } } } }