NVD

NVD CVE Change History API

CVE record modification tracking

Documentation GitHub OpenAPI

Operations 1

GET /cvehistory/2.0 Get CVE change history #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/nvd-cve-change-history-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: NVD CVE CPE CVE Change History API
  description: 'The NVD CVE API provides programmatic access to CVE (Common Vulnerabilities and Exposures) records including CVSS severity scores, affected product lists, CWE classifications, and reference links. Without an API key: 5 requests per 30 seconds; with key: 50 requests per 30 seconds.'
  version: 2.0.0
  contact:
    name: NVD Support
    url: https://nvd.nist.gov/general/contact
  license:
    name: Public Domain (US Government)
    url: https://nvd.nist.gov/developers/terms-of-use
servers:
- url: https://services.nvd.nist.gov/rest/json
  description: NVD REST API v2
security:
- {}
- APIKey: []
tags:
- name: CVE Change History
  description: CVE record modification tracking
paths:
  /cvehistory/2.0:
    get:
      operationId: getCVEChangeHistory
      summary: Get CVE change history
      description: Track modifications to CVE records over time. Useful for incremental synchronization of local databases. Date ranges must not span more than 120 days. Returns up to 5000 changes per page.
      tags:
      - CVE Change History
      parameters:
      - name: cveId
        in: query
        schema:
          type: string
          pattern: ^CVE-[0-9]{4}-[0-9]{4,}$
      - name: changeStartDate
        in: query
        required: true
        schema:
          type: string
          format: date-time
      - name: changeEndDate
        in: query
        required: true
        schema:
          type: string
          format: date-time
      - name: eventName
        in: query
        schema:
          type: string
          enum:
          - Initial Analysis
          - Reanalysis
          - CVE Modified
          - Modified Analysis
          - CVE Translated
          - Vendor Comment
          - CVE Source Update
          - CVSS Score Update
          - CWE Remap
          - CPE Deprecation Remap
          - CVE Rejected
          - CVE Unrejected
      - name: resultsPerPage
        in: query
        schema:
          type: integer
          default: 5000
          maximum: 5000
      - name: startIndex
        in: query
        schema:
          type: integer
          default: 0
      responses:
        '200':
          description: CVE change history results
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CVEHistoryResponse'
components:
  schemas:
    CVEHistoryResponse:
      type: object
      properties:
        resultsPerPage:
          type: integer
        startIndex:
          type: integer
        totalResults:
          type: integer
        format:
          type: string
        version:
          type: string
        timestamp:
          type: string
          format: date-time
        cveChanges:
          type: array
          items:
            type: object
            properties:
              change:
                type: object
                properties:
                  cveId:
                    type: string
                  eventName:
                    type: string
                  cveChangeId:
                    type: string
                    format: uuid
                  sourceIdentifier:
                    type: string
                  created:
                    type: string
                    format: date-time
                  details:
                    type: array
                    items:
                      type: object
                      properties:
                        action:
                          type: string
                          enum:
                          - Added
                          - Changed
                          - Removed
                        type:
                          type: string
                        oldValue:
                          type: string
                        newValue:
                          type: string
  securitySchemes:
    APIKey:
      type: apiKey
      in: header
      name: apiKey
      description: 'NVD API key (optional but recommended). Without a key: 5 requests/30s. With a key: 50 requests/30s. Request at https://nvd.nist.gov/developers/request-an-api-key'
externalDocs:
  description: NVD Developer Documentation
  url: https://nvd.nist.gov/developers/vulnerabilities

NVD CVE Change History API

Operations 1

Documentation

Specifications

Schemas & Data

Other Resources