Overview
A public, no-auth CVE search & threat-intelligence API over 360k+ vulnerabilities.
vuln.mlab.sh is a public HTTP API for searching and retrieving CVEs. It indexes 360k+ vulnerabilities from multiple upstream sources (NVD, MITRE, CIRCL, Red Hat, OSV) and enriches each record with CVSS, EPSS, CISA KEV status and a computed risk score.
No authentication, no API key. Every endpoint is a plain GET (except the OSV
lookup, which is a POST). Base URL: https://vuln.mlab.sh.
At a glance
API Reference
Every endpoint, parameter and schema with live examples.
Getting Started
Search, filter and fetch CVEs in a few curls.
OSV integration
Use it as a package-scoped, OSV-compatible vulnerability gate.
Quick example
curl "https://vuln.mlab.sh/api/v1/cve?q=openssl&severity=HIGH&limit=5"Formats
| Format | Endpoints |
|---|---|
| JSON | all /api/* routes |
| RSS 2.0 | /rss (alias /feed) |
| CSV | /export/csv |
The v1 JSON endpoints always return HTTP 200; on failure the body is
{ "error": "message" }. Only POST /api/v2/query uses real HTTP status codes.