CVSS
Every CVSS assessment plus the Radical Notion 4.0 rescore.
GET/api/v1/cves/{cveId}/cvss
Every CVSS assessment recorded for the CVE across sources — CNA, ADP, NVD, GHSA, and the Radical Notion CVSS 4.0 rescore — normalized into one table, plus the RN assessment block.
With ?rationale=true the RN assessment expands to the full per-metric reasoning: each base, threat, and supplemental metric carries its chosen value, the rationale text, and the citations (CISA ADP, CNA description, change history, KEV) that justify it.
Parameters
| Name | In | Type | Description |
|---|---|---|---|
cveId | path | string | CVE identifier. |
rationale | query | boolean | Include the per-metric rationale and citations on rn_assessment. Default: false. |
Example request
curl "https://radicalnotion.ai/api/v1/cves/CVE-2025-55182/cvss?rationale=true" \
-H "Authorization: Bearer $RN_TOKEN"Example response(rationale trimmed to two metrics for brevity)
{
"cve_id": "CVE-2025-55182",
"metrics": [
{
"source_type": "rn",
"source_short_name": "radical-notion",
"cvss_version": "4.0",
"base_score": 10,
"base_severity": "CRITICAL",
"vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red",
"is_primary": true,
"captured_at": "2026-06-21T21:03:43Z"
},
{
"source_type": "cna",
"source_short_name": "Meta",
"cvss_version": "3.1",
"base_score": 10,
"base_severity": "CRITICAL",
"vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"is_primary": false,
"captured_at": "2026-06-21T21:03:43Z"
},
{
"source_type": "ghsa",
"source_short_name": "GitHub",
"cvss_version": "3.1",
"base_score": 10,
"base_severity": "CRITICAL",
"vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"is_primary": false,
"captured_at": "2026-07-19T22:59:40Z"
}
],
"rn_assessment": {
"base_score": 10,
"base_severity": "CRITICAL",
"vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red",
"rescore_timestamp": "2025-12-12T12:00:00Z",
"rationale": {
"threat_metrics": {
"exploit_maturity": {
"value": "A",
"metric": "E",
"citations": [
"cisa_kev",
"change_history"
],
"rationale": "CISA has confirmed active exploitation and added this CVE to the Known Exploited Vulnerabilities (KEV) catalog."
}
},
"base_metrics_exploitability": {
"attack_vector": {
"value": "N",
"metric": "AV",
"citations": [
"cna_description"
],
"rationale": "The description explicitly states the issue involves 'unsafely deserializes payloads from HTTP requests', which is a network-bound operation.",
"definition_context": "The vulnerability is exploitable over the network via HTTP requests to Server Function endpoints."
}
}
}
}
}Response schema
| Field | Type | Description |
|---|---|---|
metrics[].source_type | string | Assessment source: cna, adp, nvd, ghsa, or rn. |
metrics[].source_short_name | string | null | Human name of the source (Meta, GitHub, radical-notion, ...). |
metrics[].cvss_version | string | CVSS version: 2.0, 3.0, 3.1, or 4.0. |
metrics[].base_score | number | null | Base score (0–10). |
metrics[].base_severity | string | null | Severity rating for the score. |
metrics[].vector_string | string | null | Full CVSS vector. |
metrics[].is_primary | boolean | Whether this row backs the CVE’s headline score. |
rn_assessment | object | null | Radical Notion’s CVSS 4.0 assessment (score, severity, vector, rescore timestamp; rationale when requested). |
Responses
| Status | Meaning |
|---|---|
200 | Success. |
400 | A path or query parameter failed validation. |
401 | Missing or invalid access token. |
403 | The CVE is outside your access tier. |
404 | No record exists for the CVE. |
429 | Rate limit exceeded. |
A CVE with no recorded CVSS assessment (e.g. a RESERVED CVE) returns empty metrics and a null assessment.
{
"cve_id": "CVE-2025-55182",
"metrics": [],
"rn_assessment": null
}