{"uid":"cap_vQBbCdMwAo7sbin8mYlMW","slug":"2s-cve-changes-feed-3e1e7036","name":"2s CVE Changes Feed","description":"CVE change feed — the CVE records MODIFIED within a time window, so an agent can incrementally maintain a vulnerability view instead of re-scanning. Pass since (YYYY-MM-DD or ISO datetime); until defaults to now (window must be ≤ 120 days, the NVD limit). Optionally narrow by keyword (product/text) or cpe (exact CPE). Returns each changed CVE with its id, published + lastModified timestamps, current vulnStatus (e.g. Modified, Analyzed, Rejected), best-available CVSS score/severity, description, and kevListed — whether it is now on the CISA Known-Exploited Vulnerabilities catalog (the high-signal flag for a poller). Newest modification first. Sourced live from NVD (NIST) + CISA KEV, free/keyless. Pair with security.cve for full per-CVE detail.","url":"https://2s.io/api/security/cve-changes?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"const":"http"},"method":{"const":"GET"},"queryParams":{"required":["since"],"properties":{"cpe":{"type":"string","description":"Optional exact CPE name filter."},"limit":{"type":"integer","description":"Max results (1-100, default 40)."},"since":{"type":"string","description":"Window start (YYYY-MM-DD or ISO datetime)."},"until":{"type":"string","description":"Window end (default now). Max 120-day window."},"keyword":{"type":"string","description":"Optional product/text filter."}}}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.00216","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.00216/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0054","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0054","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_OIMY3xvxIQTkLr3314Jao","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.0054","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves recently added or modified CVE vulnerability records from NVD/CISA within a specified time window, with optional CPE and keyword filters.","exampleAgentPrompt":"Pull all CVEs that were added or modified between June 14 and June 15, 2026 — filter to anything matching 'nginx' and give me up to 50 results.","exampleUseCases":null,"resultDescription":"A JSON object containing an array of CVE records matching the time window and filters, each with CVE ID, CVSS version/severity/base score, KEV listing status, publication date, last modified date, vulnerability status, and description. Also includes metadata with total count and the query window.","failureModes":["Missing required 'since' parameter returns a validation error","Time window exceeding 120 days returns an error","Invalid date format for 'since' or 'until' causes a parsing error","Invalid CPE string may return zero results rather than an error","Limit outside 1-100 range may be rejected or clamped","NVD upstream unavailability may cause 5xx errors or empty results"],"whenToPreferThis":"Use this endpoint when you need ground-truth CVE data sourced directly from NVD and CISA KEV, especially for time-bounded change feeds (e.g. daily digests, incident response, patch management automation). Prefer this over scraping NVD directly because it returns structured JSON with CVSS and KEV enrichment in one call, is pay-per-call with no signup, and supports CPE/keyword filtering out of the box.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T18:30:26.481Z","isFirstParty":false,"canonicalSlug":"2s-cve-changes-feed-3e1e7036"}