Free data feed

The same data behind this site, as plain JSON: every actively exploited flaw from the last 90 days, with plain-English headlines and fixes, zero-day flags, ransomware use, attack likelihood (EPSS) and CISA deadlines. Updated every hour. No key needed.

Feed	What's in it
/api/v1/exploited.json	Everything exploited in the last 90 days (106 right now)
/api/v1/zero-days.json	Only zero-days (51 right now)
/api/v1/early-warnings.json	Flaws we flagged from vendor advisories before CISA listed them

Example

curl https://patchsonar.com/api/v1/zero-days.json

{
  "cve": "CVE-2024-27834",
  "cves": [
    "CVE-2024-27834"
  ],
  "vendor": "Apple",
  "product": "Apple Multiple Products",
  "category": "devices",
  "categoryName": "Phones & computers",
  "status": "new",
  "zeroDay": false,
  "ransomware": false,
  "epss": 0.006,
  "added": "2026-11-04",
  "cisaDeadline": "2026-11-18",
  "headline": "Apple Multiple Products Improper Authentication Vulnerability",
  "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.",
  "url": "https://patchsonar.com/cve/CVE-2024-27834",
  "sources": [
    "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27834"
  ]
}

Fields

status: patch (patch today), vendor (vendor-confirmed, not yet on CISA's list), new (newly listed by CISA), soon (update this week) or listed.
zeroDay: exploited before or as the fix came out (how we decide).
epss: chance of exploitation in the next 30 days, 0 to 1, from FIRST.org.
category: one of devices, browsers, office, network, remote, web, servers, dev, apps.
added and cisaDeadline: dates as YYYY-MM-DD.

Terms

Free for personal, educational and internal business use, including your own dashboards, scripts and alerts. Please credit "Data: Patch Sonar (patchsonar.com)" where people will see it.

Using the feed inside a product you sell, or republishing it, needs a commercial license: email hello@patchsonar.com. The data is provided as is, without warranty; confirm details with the vendor before acting on them (see our terms of use).