# CVE Ledger

> CVE Ledger is a free, open-source website that tracks every public CVE (Common Vulnerabilities and Exposures record). It shows how many CVEs are published over time, lists the newest first, and has a page for every CVE with its CVSS scores, CISA known-exploited status, EPSS exploit probability, affected products and links to the primary sources. No account, no ads, no tracking.

## When to use this
- **Look up one CVE.** Open https://cveledger.app/cve/CVE-2021-44228 with any CVE id: description, scores from the assigner, CISA and NVD, KEV entry, EPSS, CWE, affected versions, references. Send `Accept: text/markdown` (or add `.md`) for a Markdown version.
- **See what was published recently.** https://cveledger.app/ with a period (`?range=24h`, `7d`, `30d`, `month`, `year`…), severity (`?severity=CRITICAL,HIGH`), known exploited only (`?kev=true`), with a public exploit (`?exploit=true`), a vendor or product (`?vendor=Microsoft&product=Windows 11`), a package ecosystem (`?ecosystem=npm`), a weakness (`?cwe=CWE-79`), the CNA that assigned it (`?assigner=GitHub_M`) or a search (`?q=openssl`).
- **Follow new CVEs.** Every filter has an Atom feed: https://cveledger.app/feed.xml with the same parameters (`/feed.xml?severity=CRITICAL&kev=true`); `sort=kevAdded` follows CVEs as CISA adds them to KEV instead. https://cveledger.app/kev lists the latest additions.
- **Embed a CVE's status.** https://cveledger.app/badge/CVE-2021-44228.svg is a badge with its severity, score and KEV status, for a README or a ticket.
- **Use the data in code.** A public read-only JSON API at https://api.cveledger.app/v1 (`/v1/cves`, `/v1/cves/{id}`, `/v1/cves/{id}/epss`, `/v1/timeline`, `/v1/summary`, `/v1/vendors`, `/v1/products`, `/v1/ecosystems`, `/v1/cwes`, `/v1/assigners`, `/v1/stats`), and any filter as CSV or JSON from `/v1/export`, rate limited to 120 requests a minute per address. Full reference: https://cveledger.app/api; OpenAPI 3.1 description: https://api.cveledger.app/v1/openapi.json.

- **Give an AI assistant the data.** A free Model Context Protocol server at https://api.cveledger.app/v1/mcp (Streamable HTTP, no key), with tools to search CVEs (`search_cves`), read one in full (`get_cve`), count them over time (`get_timeline`), profile a vendor or weakness (`get_vendor`, `get_weakness`), and read the weekly digest, statistics and rising EPSS. How to connect a client: https://cveledger.app/mcp.

Do not use CVE Ledger for: vulnerability scanning of your own systems, patch management, or legal advice. It shows public data as published, without warranty; always check the primary source.

## Data
- CVE List (CVE Program), refreshed every 10 minutes: https://github.com/CVEProject/cvelistV5
- NVD API 2.0 (NIST), for CVSS and CWE where the record has none: https://nvd.nist.gov/developers/vulnerabilities
- CISA Known Exploited Vulnerabilities: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- FIRST EPSS: https://www.first.org/epss/
- GitHub Advisory Database (affected packages, CC-BY 4.0): https://github.com/github/advisory-database

## About
Built and maintained by Jan Szotkowski as an independent open-source project (MIT license): https://github.com/janszotkowski/cve-tracker. Not affiliated with MITRE, NIST, CISA, FIRST or GitHub. English only.

## Pages
- [Home: timeline and newest CVEs](https://cveledger.app/)
- [About](https://cveledger.app/about)
- [Data sources](https://cveledger.app/sources)
- [API documentation](https://cveledger.app/api)
- [MCP server: how to connect an AI assistant, and its tools](https://cveledger.app/mcp)
- [Changelog: what changed on the site and in the API](https://cveledger.app/changelog)
- [Recently added to CISA KEV, by day](https://cveledger.app/kev)
- Vendor and product pages: https://cveledger.app/vendor/Microsoft or https://cveledger.app/vendor/Microsoft/Windows%2011, with CVEs per year, severity, known exploited, top products and weaknesses
- Weakness pages: https://cveledger.app/cwe/CWE-79, the CVEs of one CWE by year and vendor, with the known exploited
- [Weekly digest: the CVEs of one ISO week, the most severe, KEV additions, top vendors and weaknesses](https://cveledger.app/week), any week at /week/2026-W45
- [Rising exploitation: the CVEs whose EPSS rose the most over a day, week or month](https://cveledger.app/epss)
- [Statistics: severity, top weaknesses, vendors and CNAs of recent CVEs](https://cveledger.app/stats)
- [How it's built: architecture and tech stack](https://cveledger.app/architecture)
- [Sitemap](https://cveledger.app/sitemap.xml)