Trending CVEs right now API

Take the newest additions to the CISA KEV catalog (keyless, daily-cached) and join each with its FIRST EPSS score, then rank by a blend of recency, exploit probability and ransomware linkage to surface what's hot. The value-add is deriving 'what is hot' from feed deltas — neither feed alone gives a ranked trending list. Answers 'what CVEs are trending', 'newest actively-exploited vulnerabilities', 'what should I patch this week', 'hot CVEs right now'.

Price$0.01per request

MethodPOST

Route/v1/security/cve-trending

StatusLive

MIME typeapplication/json

Rate limit60/minute

Cache86400s public

securitycvetrendingkevepssexploitcisavulnerability

API URLhttps://x402.hexl.dev/v1/security/cve-trending

Integration docs

Example request

{
  "limit": 10
}

Example response

{
  "count": 10,
  "ransomwareCount": 3,
  "trending": [
    {
      "cve": "CVE-2025-31200",
      "vendor": "Apple",
      "product": "iOS",
      "name": "Apple Multiple Products Memory Corruption Vulnerability",
      "dateAdded": "2025-05-28",
      "ransomwareLinked": false,
      "epss": 0.412,
      "epssPercentile": 0.974,
      "ageDays": 6,
      "trendScore": 0.524
    }
  ]
}

Input schema

{
  "type": "object",
  "required": [],
  "properties": {
    "limit": {
      "type": "number",
      "default": 15,
      "examples": [
        10
      ]
    }
  }
}

Output schema

{
  "type": "object",
  "additionalProperties": true
}