{"count":17,"sources":[{"id":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","tier":"triage","covers":"Vulnerabilities with confirmed exploitation in the wild","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","format":"JSON","status":"live"},{"id":"osv","name":"OSV.dev","tier":"primary","covers":"Open-source packages (npm, PyPI, Go, crates, ...) including malicious packages (MAL-*)","url":"https://osv-vulnerabilities.storage.googleapis.com/npm/modified_id.csv","format":"CSV + JSON, ~15 min","status":"planned"},{"id":"ghsa","name":"GitHub Advisory Database","tier":"primary","covers":"Reviewed advisories per ecosystem, malware advisories","url":"https://api.github.com/advisories","format":"REST JSON","status":"planned"},{"id":"nextjs","name":"Next.js security advisories","tier":"primary","covers":"Next.js, published before the global databases","url":"https://api.github.com/repos/vercel/next.js/security-advisories","format":"REST JSON","status":"planned"},{"id":"traefik","name":"Traefik security advisories","tier":"primary","covers":"Traefik reverse proxy","url":"https://api.github.com/repos/traefik/traefik/security-advisories","format":"REST JSON","status":"planned"},{"id":"nodejs","name":"Node.js vulnerability feed","tier":"primary","covers":"Node.js runtime security releases","url":"https://nodejs.org/en/feed/vulnerability.xml","format":"RSS","status":"planned"},{"id":"aikido-malware","name":"Aikido malware lists","tier":"primary","covers":"Malicious npm and PyPI packages","url":"https://malware-list.aikido.dev/malware_predictions.json","format":"JSON","status":"planned"},{"id":"epss","name":"FIRST EPSS","tier":"triage","covers":"Probability of exploitation in the next 30 days, per CVE","url":"https://api.first.org/data/v1/epss","format":"REST JSON","status":"planned"},{"id":"vulnrichment","name":"CISA Vulnrichment","tier":"triage","covers":"SSVC and CVSS enrichment for CVEs","url":"https://github.com/cisagov/vulnrichment","format":"Git (JSON)","status":"planned"},{"id":"nvd","name":"NVD (NIST)","tier":"triage","covers":"CVE records; partial enrichment since 2026-04-15","url":"https://services.nvd.nist.gov/rest/json/cves/2.0","format":"REST JSON","status":"planned"},{"id":"euvd","name":"ENISA EU Vulnerability Database","tier":"european","covers":"European redundancy for CVEs","url":"https://euvdservices.enisa.europa.eu/api/lastvulnerabilities","format":"REST JSON","status":"planned"},{"id":"cncs","name":"CNCS / CERT.PT alerts","tier":"european","covers":"Portuguese national security alerts","url":"https://www.cncs.gov.pt/docs/alertas-seguranca/feed-rss/index.xml","format":"RSS","status":"planned"},{"id":"mastodon","name":"Mastodon researchers","tier":"realtime","covers":"@GossiTheDog, @wdormann, @briankrebs, @cve","url":"https://infosec.exchange/","format":"RSS per account","status":"planned"},{"id":"bluesky","name":"Bluesky accounts","tier":"realtime","covers":"doublepulsar.com, socket.dev, cve.skyfleet.blue","url":"https://bsky.app/profile/cve.skyfleet.blue/rss","format":"RSS per account","status":"planned"},{"id":"socket-blog","name":"Socket blog","tier":"realtime","covers":"npm supply-chain attacks","url":"https://socket.dev/api/blog/feed.atom","format":"Atom","status":"planned"},{"id":"risky-business","name":"Risky Business News","tier":"realtime","covers":"Daily security news","url":"https://risky.biz/feeds/risky-business-news/","format":"RSS","status":"planned"},{"id":"tldrsec","name":"tl;dr sec","tier":"realtime","covers":"Weekly security newsletter","url":"https://tldrsec.com/feed.xml","format":"RSS","status":"planned"}]}