Sources & priority levels

Code snippets

curl "https://api.oanor.com/vulnintel-api/v1/meta" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/vulnintel-api/v1/meta", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/vulnintel-api/v1/meta");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/vulnintel-api/v1/meta",
    headers={"x-oanor-key": "oanor_test_..."}
)

Example response

A real response from this endpoint, captured by the latest health check.

{
    "data": {
        "note": "Prioritise CVEs by real-world exploitation risk, not just severity. /v1/cve?cve=CVE-2021-44228 combines the FIRST.org EPSS score (the probability — 0 to 1 — that a CVE will be exploited in the next 30 days, with its percentile rank) and the CISA KEV catalog (vulnerabilities confirmed to be exploited in the wild, with the vendor, product, date added, remediation due date and whether it is used in ransomware), and derives a single priority level. Look up to 25 CVEs at once. /v1/kev browses the full CISA Known Exploited Vulnerabilities catalog, filterable by vendor, product or ransomware use. /v1/top lists the CVEs with the highest current EPSS scores. Built for vulnerability management, patch prioritisation, risk scoring and security dashboards — answering not 'how bad could this be?' but 'how likely is it to actually be exploited?'. A vulnerability-prioritisation layer — distinct from raw CVE details and CVSS severity (cve), password-breach checks (pwned) and the security-header grader (secheaders). Data live from FIRST.org and CISA. No key, no cache.",
        "sources": [
            "FIRST.org EPSS (api.first.org)",
            "CISA Known Exploited Vulnerabilities (cisagov KEV)"
        ],
        "endpoints": [
            "/v1/cve",
            "/v1/kev",
            "/v1/top",
            "/v1/meta"
        ],
        "priority_levels": [
            "critical — actively exploited (CISA KEV)",
            "high (EPSS ≥ 0.5)",
            "medium (EPSS ≥ 0.1)",
            "low",
            "unknown"
        ]
    },
    "meta": {
        "timestamp": "2026-06-01T23:40:49.473Z",
        "request_id": "99d7ae4d-9b38-47ba-b935-1b78ccba88c6"
    },
    "status": "ok",
    "message": "Meta retrieved",
    "success": true
}