List CVE - FalconFeeds

Endpoint

GET https://api.falconfeeds.io/merlin/cve

Authentication

Authorization: Bearer <your-api-token>

Query Parameters

Parameter	Type	Required	Description
`ResultCount`	`number`	Yes	Number of CVEs to return per request. Maximum: `50`.
`next`	`string`	No	Cursor for the next page. Pass the `next` value from the previous response.
`cveID`	`string`	No	Filter by a specific CVE ID (e.g., `CVE-2024-12345`).
`keyword`	`string`	No	Filter results using full-text keyword search.
`publishedSince`	`number`	No	Return CVEs published after this timestamp (in milliseconds).
`publishedTill`	`number`	No	Return CVEs published before this timestamp (in milliseconds).

Request

curl --location 'https://api.falconfeeds.io/merlin/cve?ResultCount={number}' \
  --header 'Authorization: Bearer <your-api-token>'

Response

{
  "message": "string",
  "data": [
    {
      "cveMetadata": {
        "cveId": "string",
        "state": "string",
        "assignerOrgId": "string",
        "assignerShortName": "string",
        "dateReservedInMilliseconds": "number",
        "datePublishedInMilliseconds": "number",
        "dateUpdatedInMilliseconds": "number",
        "dateRejectedInMilliseconds": "number",
        "yearDiscovered": "number"
      },
      "cna": {
        "affected": [
          {
            "collectionURL": "string",
            "packageName": "string",
            "product": "string",
            "vendor": "string",
            "versions": [
              {
                "lessThan": "string",
                "lessThanOrEqual": "string",
                "greaterThan": "string",
                "greaterThanOrEqual": "string",
                "status": "string",
                "version": "string",
                "versionType": "string"
              }
            ],
            "defaultStatus": "string",
            "modules": ["string"]
          }
        ],
        "descriptions": [
          {
            "lang": "string",
            "description": "string"
          }
        ],
        "metrics": [
          {
            "other": {
              "text": "string",
              "type": "string"
            },
            "cvssV3_1": {
              "version": "string",
              "baseScore": "float",
              "vectorString": "string",
              "baseSeverity": "string"
            },
            "cvssV3_0": {
              "version": "string",
              "baseScore": "float",
              "vectorString": "string",
              "baseSeverity": "string"
            },
            "cvssV2_0": {
              "version": "string",
              "baseScore": "float",
              "vectorString": "string",
              "baseSeverity": "string"
            }
          }
        ],
        "references": [
          {
            "url": "string",
            "name": "string",
            "tags": ["string"]
          }
        ],
        "providerMetadata": {
          "orgId": "string",
          "shortName": "string",
          "dateUpdated": "number"
        },
        "problemType": [
          {
            "descriptions": [
              {
                "cweId": "string",
                "description": "string",
                "lang": "string",
                "type": "string",
                "references": ["string"]
              }
            ]
          }
        ],
        "replacedBy": ["string"],
        "rejectedReasons": [
          {
            "lang": "string",
            "value": "string"
          }
        ]
      }
    }
  ],
  "next": "string"
}

string

Status message from the API.

array

Array of CVE objects.

object

Core CVE metadata including ID, state, assigner information, and key dates.

string

The CVE identifier (e.g., CVE-2024-12345).

string

Current state of the CVE record (e.g., PUBLISHED, REJECTED).

string

UUID of the organisation that assigned the CVE.

string

Short name of the assigning organisation.

number

Date the CVE was reserved, in milliseconds. Defaults to 0 when unavailable.

number

Date the CVE was published, in milliseconds. Defaults to 0 when unavailable.

number

Date the CVE was last updated, in milliseconds. Defaults to 0 when unavailable.

number

Date the CVE was rejected, in milliseconds. Defaults to 0 when unavailable.

number

Year the CVE was discovered. Defaults to 0 when unavailable.

object

CVE Numbering Authority (CNA) data including affected products, CVSS scores, references, and problem types.

array

List of affected products and their version ranges.

array

CVSS scoring metrics. cvssV3_1, cvssV3_0, and cvssV2_0 may be null when scoring data is unavailable.

array

External references (advisories, patches, PoCs) related to the CVE.

number

Date the provider metadata was last updated, in milliseconds. Defaults to 0 when unavailable.

array

List of CVE IDs that replace this entry, if applicable.

array

Reasons for rejection, if the CVE state is REJECTED.

string

Cursor to pass as next for the next page of results.

​Endpoint

​Authentication

​Query Parameters

​Request

​Response

Endpoint

Authentication

Query Parameters

Request

Response