References

External references with provenance and intent labels.

GET/api/v1/cves/{cveId}/references

Deduplicated external references with provenance (which source cited the URL and with what tags) and Radical Notion’s intent classification — whether a link is an advisory, an exploit, a scanner, a mitigation, or a vulnerable target.

Parameters

Name	In	Type	Description
`cveId`	path	string	CVE identifier.
`intent`	query	string	Only references classified with this intent label (e.g. exploit, scanner, mitigation).
`kind`	query	string	Only references of this kind (e.g. github_repo, web_page).

Example request

curl "https://radicalnotion.ai/api/v1/cves/CVE-2025-55182/references?intent=exploit" \
  -H "Authorization: Bearer $RN_TOKEN"

Example response(trimmed to three references for brevity)

{
  "cve_id": "CVE-2025-55182",
  "count": 18,
  "references": [
    {
      "url": "https://github.com/alptexans/RSC-Detect-CVE-2025-55182",
      "kind": "github_repo",
      "host": "github.com",
      "source": "github_search",
      "source_tags": null,
      "intent_labels": [
        "exploit",
        "mitigation"
      ],
      "is_dead_link": false,
      "first_seen": "2026-04-08T16:40:43Z"
    },
    {
      "url": "https://github.com/assetnote/react2shell-scanner",
      "kind": "github_repo",
      "host": "github.com",
      "source": "github_search",
      "source_tags": null,
      "intent_labels": [
        "exploit",
        "scanner",
        "mitigation"
      ],
      "is_dead_link": false,
      "first_seen": "2026-04-08T16:40:36Z"
    },
    {
      "url": "https://github.com/BeichenDream/CVE-2025-55182-GodzillaMemoryShell",
      "kind": "github_repo",
      "host": "github.com",
      "source": "github_search",
      "source_tags": null,
      "intent_labels": [
        "exploit"
      ],
      "is_dead_link": false,
      "first_seen": "2026-04-08T16:40:46Z"
    }
  ]
}

Response schema

Field	Type	Description
`references[].url`	string	The reference URL.
`references[].kind`	string \| null	URL kind: github_repo, web_page, advisory, ...
`references[].source`	string	Which pipeline discovered the link (cna, adp, ghsa, osv, ...).
`references[].source_tags`	string[] \| null	Tags the source attached (ADVISORY, FIX, WEB, ...).
`references[].intent_labels`	string[] \| null	RN intent classification of the linked content.
`references[].is_dead_link`	boolean	The URL no longer resolves.
`references[].first_seen`	string \| null	When the link was first observed on the CVE.

Responses

Status	Meaning
`200`	Success.
`400`	A path or query parameter failed validation.
`401`	Missing or invalid access token.
`403`	The CVE is outside your access tier.
`404`	No record exists for the CVE.
`429`	Rate limit exceeded.

A CVE with no references matching the filter returns count 0.

Empty result (200)

{
  "cve_id": "CVE-2025-55182",
  "count": 0,
  "references": []
}

Name

Type

Description

cveId

path

string

CVE identifier.

intent

query

string

Only references classified with this intent label (e.g. exploit, scanner, mitigation).

kind

query

string

Only references of this kind (e.g. github_repo, web_page).

Example response(trimmed to three references for brevity)

{
  "cve_id": "CVE-2025-55182",
  "count": 18,
  "references": [
    {
      "url": "https://github.com/alptexans/RSC-Detect-CVE-2025-55182",
      "kind": "github_repo",
      "host": "github.com",
      "source": "github_search",
      "source_tags": null,
      "intent_labels": [
        "exploit",
        "mitigation"
      ],
      "is_dead_link": false,
      "first_seen": "2026-04-08T16:40:43Z"
    },
    {
      "url": "https://github.com/assetnote/react2shell-scanner",
      "kind": "github_repo",
      "host": "github.com",
      "source": "github_search",
      "source_tags": null,
      "intent_labels": [
        "exploit",
        "scanner",
        "mitigation"
      ],
      "is_dead_link": false,
      "first_seen": "2026-04-08T16:40:36Z"
    },
    {
      "url": "https://github.com/BeichenDream/CVE-2025-55182-GodzillaMemoryShell",
      "kind": "github_repo",
      "host": "github.com",
      "source": "github_search",
      "source_tags": null,
      "intent_labels": [
        "exploit"
      ],
      "is_dead_link": false,
      "first_seen": "2026-04-08T16:40:46Z"
    }
  ]
}

Response schema

Field	Type	Description
`references[].url`	string	The reference URL.
`references[].kind`	string \| null	URL kind: github_repo, web_page, advisory, ...
`references[].source`	string	Which pipeline discovered the link (cna, adp, ghsa, osv, ...).
`references[].source_tags`	string[] \| null	Tags the source attached (ADVISORY, FIX, WEB, ...).
`references[].intent_labels`	string[] \| null	RN intent classification of the linked content.
`references[].is_dead_link`	boolean	The URL no longer resolves.
`references[].first_seen`	string \| null	When the link was first observed on the CVE.

Responses

Status	Meaning
`200`	Success.
`400`	A path or query parameter failed validation.
`401`	Missing or invalid access token.
`403`	The CVE is outside your access tier.
`404`	No record exists for the CVE.
`429`	Rate limit exceeded.

A CVE with no references matching the filter returns count 0.

Empty result (200)

{
  "cve_id": "CVE-2025-55182",
  "count": 0,
  "references": []
}