Terms of use
cved is a free service with no accounts. By using the site or its API you agree to these terms.
The data is provided as is
We collect vulnerability data from public sources and show it as accurately as we can, but we make no promise that it is complete, correct or up to date, and the site may be unavailable at times. Check the original record (every item links to it) before acting on anything you read here. To the extent the law allows, we accept no liability for any loss arising from using the site or its data.
We are not affiliated with or endorsed by The MITRE Corporation, the CVE Program, GitHub, OSV.dev or the Zero Day Initiative. CVE® is a registered trademark of The MITRE Corporation.
Licenses
The data stays under its sources' terms, listed under data sources and licenses. The site's code is open source under the Apache License 2.0 (gitlab.com/cved/cved).
Acceptable use
- Use the site and the API at a reasonable rate. For bulk data, use the sources directly, such as cvelistV5, rather than paging through the API.
- Don't try to overload, disrupt or break into the site. If you find a security problem, please report it as described in the project's security policy.
We may limit or block traffic that disrupts the service, and change or stop the service at any time.
Contact
Last updated 2026-10-23.