CVE Tracker

अपने AI assistant से सार्वजनिक CVE खोजें और फ़िल्टर करें। इसमें CVSS स्कोर, CISA KEV और EPSS शामिल हैं। मुफ़्त, ओपन सोर्स, API key की ज़रूरत नहीं।

trackcve.app पर देखें

होस्ट किया गया MCP सर्वर

npx add-mcp 'https://api.trackcve.app/v1/mcp'

Claude Code, Codex, Cursor और अन्य में इंस्टॉल होता है

दस्तावेज़

CVE Ledger

CVE Ledger is a free, open-source website that tracks every public CVE (Common Vulnerabilities and Exposures record). It shows how many CVEs are published over time, lists the newest first, and has a page for every CVE with its CVSS scores, CISA known-exploited status, EPSS exploit probability, affected products and links to the primary sources. No account, no ads, no tracking.

When to use this

  • Look up one CVE. Open https://cveledger.app/cve/CVE-2021-44228 with any CVE id: description, scores from the assigner, CISA and NVD, KEV entry, EPSS, CWE, affected versions, references. Send Accept: text/markdown (or add .md) for a Markdown version.

  • See what was published recently. https://cveledger.app/ with a period (?range=24h, 7d, 30d, month, year…), severity (?severity=CRITICAL,HIGH), known exploited only (?kev=true), with a public exploit (?exploit=true), a vendor or product (?vendor=Microsoft&product=Windows 11), a package ecosystem (?ecosystem=npm), a weakness (?cwe=CWE-79), the CNA that assigned it (?assigner=GitHub_M) or a search (?q=openssl).

  • Follow new CVEs. Every filter has an Atom feed: https://cveledger.app/feed.xml with the same parameters (/feed.xml?severity=CRITICAL&kev=true); sort=kevAdded follows CVEs as CISA adds them to KEV instead. https://cveledger.app/kev lists the latest additions.

  • Embed a CVE's status. https://cveledger.app/badge/CVE-2021-44228.svg is a badge with its severity, score and KEV status, for a README or a ticket.

  • Use the data in code. A public read-only JSON API at https://api.cveledger.app/v1 (/v1/cves, /v1/cves/{id}, /v1/cves/{id}/epss, /v1/timeline, /v1/summary, /v1/vendors, /v1/products, /v1/ecosystems, /v1/cwes, /v1/assigners, /v1/stats, /v1/status), and any filter as CSV or JSON from /v1/export, rate limited to 120 requests a minute per address. Full reference: https://cveledger.app/api; OpenAPI 3.1 description: https://api.cveledger.app/v1/openapi.json.

  • Give an AI assistant the data. A free Model Context Protocol server at https://api.cveledger.app/v1/mcp (Streamable HTTP, no key), with tools to search CVEs (search_cves), read one in full (get_cve), count them over time (get_timeline), profile a vendor or weakness (get_vendor, get_weakness), and read the weekly digest, statistics and rising EPSS. How to connect a client: https://cveledger.app/mcp.

Do not use CVE Ledger for: vulnerability scanning of your own systems, patch management, or legal advice. It shows public data as published, without warranty; always check the primary source.

Data

About

Built and maintained by Jan Szotkowski as an independent open-source project (MIT license): https://github.com/janszotkowski/cve-tracker. Not affiliated with MITRE, NIST, CISA, FIRST or GitHub. English only.

Pages