{"uid":"cap_S0_sQrpFoEVG6Fy3XC3vV","slug":"stack-facts-cve-prioritize-43b05317","name":"Stack Facts CVE Prioritize","description":"Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.","url":"https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/cve/prioritize?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"cves":{"type":"array","items":{"type":"string","pattern":"^[Cc][Vv][Ee]-\\d{4}-\\d{4,}$","maxLength":40},"maxItems":100,"minItems":1}}},"responseSchema":{"type":"json","example":{"data":{"count":3,"order":"in_kev first, then cvss (highes…","in_kev":1,"results":[{"cve":"CVE-2021-44228","cvss":null,"rank":1,"in_kev":true,"priority":"critical","kev_due_date":"2021-12-24","kev_date_added":"2021-12-10","priority_basis":"kev","known_ransomware":true}],"kev_catalog_version":"2026.10.10"},"meta":{"stale":false,"notice":"Normalised (modified) from the …","dataset":"cve_prioritize","datasets":{"kev":{}},"licences":"/licences","attribution":"KEV status from the CISA Known …"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_nXCY_bXW2njO9Q_7PK1CD","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Ranks a list of CVE identifiers by exploitability and severity, flagging CISA KEV membership, ransomware association, CVSS scores, and remediation due dates.","exampleAgentPrompt":"Can you prioritize these CVEs for me — CVE-2021-44228, CVE-2022-26134, and CVE-2023-23397 — and tell me which ones are in the CISA KEV catalog, whether any are linked to ransomware, and what their remediation deadlines are?","exampleUseCases":[{"title":"Pre-patch triage for security team","prompt":"We found these 5 CVEs in our dependency scan: CVE-2021-44228, CVE-2022-26134, CVE-2023-23397, CVE-2022-22965, and CVE-2021-26855. Can you rank them by urgency and tell me which ones CISA says must be patched and by when?"},{"title":"Ransomware risk assessment for open source dependencies","prompt":"Before we ship this release, check these CVEs from our audit — CVE-2022-42475, CVE-2022-30190, CVE-2021-34527 — and flag which ones are tied to ransomware campaigns or are in the CISA known-exploited list."},{"title":"CI/CD pipeline vulnerability gate","prompt":"My pipeline detected CVE-2023-44487 and CVE-2022-0847 in our container image. Are either of these actively exploited by threat actors or in the CISA KEV catalog? I need to know if I should block the deployment."}],"resultDescription":"Returns a ranked list of CVEs ordered by priority (KEV membership first, then CVSS score descending), each entry including rank, CVSS score, KEV membership flag, ransomware association, KEV due date, KEV date added, priority label (e.g. critical), and priority basis. Also includes aggregate counts, KEV catalog version, dataset attribution, and license links.","failureModes":["Invalid CVE format (must match CVE-YYYY-NNNNN pattern) returns validation error","Empty or missing cves array returns error","More than 100 CVEs in a single request exceeds maxItems limit","CVE not found in any dataset returns entry with null scores and no KEV data","Payment failure or insufficient USDC balance blocks the request","Stale dataset flag in meta indicates data may be behind the latest KEV catalog"],"whenToPreferThis":"Choose this endpoint when you need to triage multiple CVEs by real-world exploitability rather than just CVSS score alone — particularly when KEV membership, ransomware linkage, and mandatory remediation deadlines (CISA due dates) are decision factors. It is ideal for security automation pipelines, pre-deployment gates, or any agent workflow where patch priority must be justified by authoritative government threat data. Prefer it over raw NVD or OSV lookups when you want a single ranked, signed answer combining KEV and CVSS in one call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-19T06:32:11.519Z","isFirstParty":false,"canonicalSlug":"stack-facts-cve-prioritize-43b05317"}