API reference

Read-only endpoints grouped by domain: the CVE catalog and its composable per-CVE record, the weakness and attack-pattern catalogs, vendor, product, and CNA directories, global search, corpus statistics, and shared catalogs. All requests are HTTPS GET against https://radicalnotion.ai/api/v1.

CVEs

Weaknesses (CWE)

Method	Endpoint	Description
GET	/api/v1/cwesSearch and page through the CWE catalog.	Search and page through the CWE catalog.
GET	/api/v1/cwes/{cweId}The full CWE entry with mitigations and examples.	The full CWE entry with mitigations and examples.
GET	/api/v1/cwes/{cweId}/relationshipsParent, child, and peer weaknesses.	Parent, child, and peer weaknesses.
GET	/api/v1/cwes/{cweId}/cvesPage through the CVEs mapped to a weakness.	Page through the CVEs mapped to a weakness.

Attack patterns (CAPEC)

Method	Endpoint	Description
GET	/api/v1/capecsSearch and page through the CAPEC catalog.	Search and page through the CAPEC catalog.
GET	/api/v1/capecs/{capecId}The full CAPEC entry with mitigations and mappings.	The full CAPEC entry with mitigations and mappings.
GET	/api/v1/capecs/{capecId}/cwesThe weaknesses an attack pattern targets.	The weaknesses an attack pattern targets.

Vendors & products

Method	Endpoint	Description
GET	/api/v1/vendorsSearch vendors ranked by CVE count.	Search vendors ranked by CVE count.
GET	/api/v1/vendors/{vendorSlug}/productsPage through a vendor’s products.	Page through a vendor’s products.
GET	/api/v1/vendors/{vendorSlug}/cvesPage through the CVEs affecting a vendor.	Page through the CVEs affecting a vendor.
GET	/api/v1/productsSearch products across all vendors.	Search products across all vendors.

CNAs

Method	Endpoint	Description
GET	/api/v1/cnasThe CNA directory with report-card grades.	The CNA directory with report-card grades.
GET	/api/v1/cnas/statsAggregate stats and leaderboards across all CNAs.	Aggregate stats and leaderboards across all CNAs.
GET	/api/v1/cnas/{slug}The full report card for one CNA.	The full report card for one CNA.
GET	/api/v1/cnas/{slug}/cvesPage through the CVEs a CNA has assigned.	Page through the CVEs a CNA has assigned.

Search

Method	Endpoint	Description
GET	/api/v1/searchOne query across CVEs, weaknesses, vendors, and more.	One query across CVEs, weaknesses, vendors, and more.
GET	/api/v1/search/suggestFast typeahead suggestions for a partial query.	Fast typeahead suggestions for a partial query.

Statistics

Method	Endpoint	Description
GET	/api/v1/statsHeadline totals for the whole corpus.	Headline totals for the whole corpus.
GET	/api/v1/stats/severityCVE counts by severity band.	CVE counts by severity band.
GET	/api/v1/stats/cwesThe most common weaknesses in the corpus.	The most common weaknesses in the corpus.
GET	/api/v1/stats/vendorsThe vendors with the most CVEs.	The vendors with the most CVEs.

Catalogs

Method	Endpoint	Description
GET	/api/v1/exploitsThe corpus-wide public exploit catalog — metadata only.	The corpus-wide public exploit catalog — metadata only.
GET	/api/v1/detection-rulesThe corpus-wide detection rule catalog.	The corpus-wide detection rule catalog.
GET	/api/v1/reports/typesThe catalog of AI report types.	The catalog of AI report types.

Method	Endpoint	Description
GET	/api/v1/cvesSearch and page through the CVE catalog.	Search and page through the CVE catalog.
GET	/api/v1/cves/{cveId}Fetch a single CVE with optional embedded sub-resources.	Fetch a single CVE with optional embedded sub-resources.
GET	/api/v1/cves/{cveId}/cvssEvery CVSS assessment plus the Radical Notion 4.0 rescore.	Every CVSS assessment plus the Radical Notion 4.0 rescore.
GET	/api/v1/cves/{cveId}/epssThe latest EPSS score and its full daily history.	The latest EPSS score and its full daily history.
GET	/api/v1/cves/{cveId}/affectedAffected products and packages from every source.	Affected products and packages from every source.
GET	/api/v1/cves/{cveId}/referencesExternal references with provenance and intent labels.	External references with provenance and intent labels.
GET	/api/v1/cves/{cveId}/exploitsCatalogued public exploit modules — metadata only.	Catalogued public exploit modules — metadata only.
GET	/api/v1/cves/{cveId}/evidenceExploitation, detection, and mitigation signals.	Exploitation, detection, and mitigation signals.
GET	/api/v1/cves/{cveId}/timelineThe summarized change history of the CVE record.	The summarized change history of the CVE record.
GET	/api/v1/cves/{cveId}/nutritionThe complete CVE record in a single response.	The complete CVE record in a single response.
GET	/api/v1/cves/{cveId}/reportsAI-generated analysis reports for a CVE.	AI-generated analysis reports for a CVE.
GET	/api/v1/cves/{cveId}/reports/{reportId}Fetch a single AI report with its full body and sources.	Fetch a single AI report with its full body and sources.
GET	/api/v1/cves/{cveId}/ghsaThe linked GitHub Security Advisory record.	The linked GitHub Security Advisory record.
GET	/api/v1/cves/{cveId}/osvThe linked Open Source Vulnerability record.	The linked Open Source Vulnerability record.
GET	/api/v1/cves/{cveId}/detection-rulesDetection rules and templates catalogued for a CVE.	Detection rules and templates catalogued for a CVE.
GET	/api/v1/cves/{cveId}/detectionA rollup of detection coverage for a CVE.	A rollup of detection coverage for a CVE.