{ "openapi": "3.0.1", "info": { "title": "CVE Scraper: NVD Vulnerabilities & Dependency Audit", "description": "Look up any CVE from NIST's National Vulnerability Database with CVSS score, CWE type and affected vendors, or audit your dependencies against Google's OSV to see which advisories hit the exact versions you run, each with the version that fixes it. npm, PyPI, Go, Maven, crates.io. No API key.", "version": "0.1", "x-build-id": "vncM1qmbQmu5Sry70" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/glitchbound~cve-scraper/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-glitchbound-cve-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/glitchbound~cve-scraper/runs": { "post": { "operationId": "runs-sync-glitchbound-cve-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/glitchbound~cve-scraper/run-sync": { "post": { "operationId": "run-sync-glitchbound-cve-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "cveIds": { "title": "CVE IDs", "uniqueItems": true, "type": "array", "description": "Specific CVEs to look up, one per line, e.g. CVE-2021-44228. Returns the full NIST record: CVSS score and vector, CWE weakness types, affected vendors and products, and vendor references.", "items": { "type": "string" } }, "packages": { "title": "Packages to audit", "uniqueItems": true, "type": "array", "description": "Dependencies to check against Google's OSV database, one per line. Use ecosystem:name, and add @version to see only what affects the version you actually run: npm:lodash@4.17.20, pypi:django@3.2.0, go:github.com/gin-gonic/gin, maven:org.apache.logging.log4j:log4j-core@2.14.1. A bare name defaults to npm. Every advisory carries the version that fixes it.", "items": { "type": "string" } }, "keywords": { "title": "Keyword search", "uniqueItems": true, "type": "array", "description": "Free-text search across NVD, one per line, e.g. log4j or \"remote code execution\". Searches the description text of every CVE.", "items": { "type": "string" } }, "severities": { "title": "Severity", "uniqueItems": true, "type": "array", "description": "Only CVEs at these CVSS v3 severities. Combine with a date window to get, for example, everything CRITICAL published this month.", "items": { "type": "string", "enum": [ "LOW", "MEDIUM", "HIGH", "CRITICAL" ] } }, "publishedSince": { "title": "Published since", "type": "string", "description": "Only CVEs published on or after this date, e.g. 2026-07-01. NVD accepts a window of at most 120 days and answers 404 for anything wider, which reads as \"no results\", so a longer range is refused here with an explanation rather than sent." }, "publishedUntil": { "title": "Published until", "type": "string", "description": "End of the window, e.g. 2026-07-31. Defaults to today." }, "minCvssScore": { "title": "Minimum CVSS score", "minimum": 0, "maximum": 10, "type": "integer", "description": "Drop anything scored below this, 0 to 10. NVD has no such parameter, so this is applied after fetch and the dropped rows are not charged." }, "maxResultsPerQuery": { "title": "Max results per query", "minimum": 1, "type": "integer", "description": "Ceiling per CVE, keyword, severity or package.", "default": 100 }, "maxItems": { "title": "Maximum results (whole run)", "minimum": 0, "type": "integer", "description": "A hard ceiling on rows for the entire run, across every query. The per-query limit above caps each one separately, so fifty queries at a hundred each is still five thousand rows; this caps the total. The run stops cleanly when it is reached and nothing beyond that point is fetched or charged. Leave empty for no ceiling." }, "proxyConfiguration": { "title": "Proxy", "type": "object", "description": "Proxy settings. Both sources are official and neither blocks datacenter addresses, so the default is fine. NVD does rate-limit to 5 requests per 30 seconds without an API key, which this Actor paces for rather than retries into.", "default": { "useApifyProxy": true } } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } }