Timeline

The summarized change history of the CVE record.

GET/api/v1/cves/{cveId}/timeline

The summarized change history of the CVE record: one entry per human-readable change title — reservation, publication, SSVC changes, KEV addition, reference churn, NVD enrichment, GHSA sync, Radical Notion analyses — newest first, each with its granular change messages.

Several titles can share one record-version bump (a CNA edit, NVD enrichment, and an RN analysis may all land on the same version); each entry carries only the messages that belong to it, with old/new values where the change modified a field.

Parameters

Name	In	Type	Description
`cveId`	path	string	CVE identifier.
`messages`	query	boolean	Include per-entry change messages; false returns titles only. Default: `true`.
`category`	query	string	Only entries of one category (publication, kev, ssvc, references, affected_versions, nvd, ghsa, rn_report, ...).
`since`	query	date	Only entries at or after this ISO date.

Example request

curl "https://radicalnotion.ai/api/v1/cves/CVE-2025-55182/timeline?since=2025-12-05" \
  -H "Authorization: Bearer $RN_TOKEN"

Example response(trimmed to two entries for brevity)

{
  "cve_id": "CVE-2025-55182",
  "count": 8,
  "timeline": [
    {
      "version_from": 10,
      "version_to": 10,
      "title": "Weakness classification added, and 2 more changes",
      "category": "nvd",
      "changed_at": "2026-06-17T09:41:24Z",
      "added_count": 3,
      "modified_count": 0,
      "removed_count": 0,
      "messages": [
        {
          "summary": "NVD assessed the CVE",
          "category": "nvd",
          "provider": "NVD",
          "json_path": "containers/nvd",
          "new_value": null,
          "old_value": null,
          "operation": "group_header",
          "change_type": "NVD_GROUP"
        },
        {
          "summary": "Weakness: CWE-502",
          "category": "nvd",
          "provider": "NVD",
          "json_path": "containers/nvd/x_cwe/0/cweId",
          "new_value": "CWE-502",
          "old_value": null,
          "operation": "add",
          "change_type": "CWE_MODIFIED"
        },
        {
          "summary": "4 affected versions for facebook react: 19.0.0 ≤ 19.0.0, 19.1.0 ≤ 19.1.0, 19.1.1 ≤ 19.1.1, and 19.2.0 ≤ 19.2.0 (4 CPE identifiers)",
          "category": "nvd",
          "provider": "NVD",
          "json_path": "containers/nvd/affected/0",
          "new_value": "{'vendor': 'facebook', 'product': 'react', 'cpes': ['cpe:2.3:a:facebook:react:19.0.0:*:*:*:*:*:*:...",
          "old_value": null,
          "operation": "add",
          "change_type": "NVD_MODIFIED"
        },
        {
          "summary": "78 affected versions for vercel next.js: 14.3.0 ≤ 14.3.0, 14.3.0 ≤ 14.3.0, 14.3.0 ≤ 14.3.0, 14.3.0 ≤ 14.3.0, 14.3.0 ≤ 14.3.0, and 73 more (72 CPE identifiers)",
          "category": "nvd",
          "provider": "NVD",
          "json_path": "containers/nvd/affected/1",
          "new_value": "{'vendor': 'vercel', 'product': 'next.js', 'cpes': ['cpe:2.3:a:vercel:next.js:*:*:*:*:*:node.js:*...",
          "old_value": null,
          "operation": "add",
          "change_type": "NVD_MODIFIED"
        }
      ]
    },
    {
      "version_from": 10,
      "version_to": 10,
      "title": "Radical Notion recorded a CVSS base score of 10.0 (Critical)",
      "category": "rn_metrics_analysis",
      "changed_at": "2026-04-28T02:42:24Z",
      "added_count": 1,
      "modified_count": 0,
      "removed_count": 0,
      "messages": [
        {
          "summary": "Radical Notion modified the CVE",
          "category": "rn_analysis_metrics",
          "provider": "Radical Notion",
          "json_path": "containers/rn",
          "new_value": null,
          "old_value": null,
          "operation": "group_header",
          "change_type": "RN_GROUP"
        },
        {
          "summary": "CVSS 4.0 score: 10.0 (Critical)",
          "category": "rn_analysis_metrics",
          "provider": "Radical Notion",
          "json_path": "rn_analysis/metrics/4.0/base_score",
          "new_value": "{'base_score': 10.0, 'base_severity': 'Critical'}",
          "old_value": null,
          "operation": "add",
          "change_type": "RN_METRICS_ANALYSIS"
        }
      ]
    }
  ]
}

Response schema

Field	Type	Description
`timeline[].title`	string	Human-readable summary of the change.
`timeline[].category`	string \| null	Change category the title belongs to.
`timeline[].version_from / version_to`	integer	CVE record versions the change spans (equal for enrichment-only changes).
`timeline[].changed_at`	string \| null	When the change occurred (ISO 8601).
`timeline[].added_count / modified_count / removed_count`	integer	Field-level change counts.
`timeline[].messages[]`	object[]	Granular messages: summary, operation, change_type, category, provider, json_path, old_value, new_value.

Responses

Status	Meaning
`200`	Success.
`400`	A path or query parameter failed validation.
`401`	Missing or invalid access token.
`403`	The CVE is outside your access tier.
`404`	No record exists for the CVE.
`429`	Rate limit exceeded.

A CVE with no change entries in range returns count 0.

Empty result (200)

{
  "cve_id": "CVE-2025-55182",
  "count": 0,
  "timeline": []
}