National Institute of Standards and Technology CVE History API

CVE change history events

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/national-institute-of-standards-and-technology-cve-history-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

national-institute-of-standards-and-technology-cve-history-api-openapi.yml Raw ↑
openapi: 3.0.3
info:
  title: NIST National Vulnerability Database (NVD) CPE CVE History API
  description: The National Vulnerability Database (NVD) API, operated by the National Institute of Standards and Technology, provides programmatic access to Common Vulnerabilities and Exposures (CVE) records, CVE change history, and Common Platform Enumeration (CPE) records. The API supports pagination, filtering, and date-range queries for vulnerability and product data.
  version: 2.0.0
  contact:
    name: NIST NVD
    url: https://nvd.nist.gov/developers
servers:
- url: https://services.nvd.nist.gov
  description: NVD production services
tags:
- name: CVE History
  description: CVE change history events
paths:
  /rest/json/cvehistory/2.0:
    get:
      tags:
      - CVE History
      summary: Retrieve CVE change history
      description: Retrieve change events for CVE records, optionally filtered by CVE identifier, event name, and change date range.
      operationId: getCveHistory
      parameters:
      - name: changeStartDate
        in: query
        description: Change event start date (max 120-day range).
        schema:
          type: string
          format: date-time
      - name: changeEndDate
        in: query
        schema:
          type: string
          format: date-time
      - name: cveId
        in: query
        schema:
          type: string
      - name: eventName
        in: query
        description: Filter by event type such as CVE Received, Initial Analysis, Reanalysis, CVE Modified, Modified Analysis, CVE Translated, Vendor Comment, CVE Source Update, CPE Deprecation Remap, CWE Remap, Reference Tag Update, CVE Rejected, CVE Unrejected, CVE CISA KEV Update.
        schema:
          type: string
      - name: resultsPerPage
        in: query
        description: Maximum results per page (max 5000).
        schema:
          type: integer
          maximum: 5000
      - name: startIndex
        in: query
        schema:
          type: integer
      responses:
        '200':
          description: A paginated CVE change history envelope.