{ "openapi": "3.0.1", "info": { "title": "CVE Monitor · NVD + CISA Known Exploited (KEV)", "description": "New vulnerabilities for your tech stack: CVEs from the NVD for your keywords (openssl, nginx, wordpress …) with CVSS score, CWE and affected products, flagged when CISA lists them as actively exploited (KEV, with due date). Plus a feed of new KEV entries. Only new since the last run.", "version": "0.1", "x-build-id": "X5vIB04Zaoh1W1IeL" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/thequietstack~cve-kev-monitor/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-thequietstack-cve-kev-monitor", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/thequietstack~cve-kev-monitor/runs": { "post": { "operationId": "runs-sync-thequietstack-cve-kev-monitor", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/thequietstack~cve-kev-monitor/run-sync": { "post": { "operationId": "run-sync-thequietstack-cve-kev-monitor", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "mode": { "title": "Mode", "enum": [ "cve_keywords", "kev_new" ], "type": "string", "description": "Keyword mode searches the NVD; KEV mode watches the CISA catalog of vulnerabilities exploited in the wild.", "default": "cve_keywords" }, "keywords": { "title": "Keywords (products / vendors)", "type": "array", "description": "One per line, e.g. openssl, nginx, wordpress, fortinet. In KEV mode they filter vendor/product (empty = all).", "items": { "type": "string" } }, "lookbackDays": { "title": "Look back (days)", "minimum": 1, "maximum": 120, "type": "integer", "description": "CVEs published (or modified, see below) in the last N days. NVD allows at most 120 days per query.", "default": 7 }, "dateField": { "title": "Date field", "enum": [ "published", "modified" ], "type": "string", "description": "Which NVD date the look-back window applies to.", "default": "published" }, "minSeverity": { "title": "Minimum severity", "enum": [ "NONE", "LOW", "MEDIUM", "HIGH", "CRITICAL" ], "type": "string", "description": "CVEs below this CVSS severity are skipped (not charged).", "default": "NONE" }, "maxCvesPerKeyword": { "title": "Max CVEs per keyword per run", "minimum": 1, "maximum": 5000, "type": "integer", "description": "Cost guard for broad keywords (e.g. wordpress has ~1,000 CVEs a month). CVEs above the limit are not lost: they come in the next run.", "default": 200 }, "onlyKev": { "title": "Only actively exploited (in KEV)", "type": "boolean", "description": "Keyword mode: return only CVEs that are in CISA's KEV catalog.", "default": false }, "onlyNew": { "title": "Only CVEs not delivered before", "type": "boolean", "description": "Remembers CVE id + last-modified per keyword; a CVE comes again only when NVD updates it.", "default": true }, "firstRunMode": { "title": "KEV mode: first run", "enum": [ "baseline", "deliver" ], "type": "string", "description": "baseline = the first run only remembers the current catalog and alerts start with the next run; deliver = return current entries (use 'KEV since date' to limit).", "default": "baseline" }, "kevSinceDate": { "title": "KEV mode: added since (optional)", "type": "string", "description": "YYYY-MM-DD. Only KEV entries added on or after this date." }, "nvdApiKey": { "title": "NVD API key (optional, free)", "type": "string", "description": "Without a key the NVD allows 5 requests per 30 seconds (the Actor waits accordingly). A free key from nvd.nist.gov makes runs with many keywords much faster." }, "stateStoreName": { "title": "State store name", "type": "string", "description": "Named key-value store that remembers delivered CVEs and KEV entries. Use different names for different watch lists.", "default": "cve-kev-monitor-state" } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } } } } } } } } }