CVE and Known-Exploited Evidence
Look up CVE records and search the CISA Known Exploited Vulnerabilities catalog.
RequestGuard exposes public CVE records from OSV and exact entries from the CISA Known Exploited Vulnerabilities (KEV) catalog. The catalog records vulnerabilities that CISA requires US federal civilian agencies to remediate by the listed due date. It does not establish whether a specific installation is exposed.
Both CVE and KEV lookups require an active workspace API key and are included in Free. Each request consumes one shared monthly lookup unit. See Authorization for limits and errors.
CVE Lookup
GET /vulnerabilities/cve/{cveId}/curl "https://api.requestguard.com/v1/vulnerabilities/cve/CVE-2021-44228/" \
-H "Authorization: Bearer rg_sk_live_..."The response contains OSV severity and affected-package records when available, plus knownExploitation and kev. knownExploitation: listed means the same CVE identifier appears in the CISA catalog.
KEV Catalog Search
GET /vulnerabilities/kev/This endpoint requires an active workspace API key, is included in Free and consumes one shared monthly lookup unit. It supports these query parameters:
| Parameter | Behavior |
|---|---|
q | Searches CVE ID, vendor, product, name, and description. |
vendor | Filters the CISA vendor/project field. |
product | Filters the CISA product field. |
ransomware | Accepts all, known, or unknown. |
addedFrom, addedTo | Inclusive YYYY-MM-DD catalog-addition dates. |
limit, offset | Pages results; limit is 1 to 100. |
curl "https://api.requestguard.com/v1/vulnerabilities/kev/?vendor=Apache&ransomware=known&limit=25" \
-H "Authorization: Bearer rg_sk_live_..."CISA fields such as requiredAction, dueDate, and knownRansomwareCampaignUse are returned without reinterpretation. Package matching happens separately through exact CVE identifiers found in OSV or Packagist records.