Firecrawl Alexandria

NIST National Vulnerability Database (NVD)

CVE vulnerability records from the NIST National Vulnerability Database CVE API 2.0 (services.nvd.nist.gov): look up a CVE by id, search by keyword, CPE product, CWE weakness, CVSS severity, CISA KEV membership and publication or modification dates, and list CVEs published or changed in the last days. Each record carries CVSS v4.0/v3.x/v2 scores, CWEs, CPE applicability matches, the CISA Known Exploited Vulnerabilities flag and dates, and references. Every result carries NVD's required notice.

1 Firecrawl tool uses NIST National Vulnerability Database (NVD)

Try NIST National Vulnerability Database (NVD) now.

Choose an example or ask your own question.

NIST National Vulnerability Database (NVD)
TRY ASKING
1Request
string

Optional NVD API key (raises NVD's limit from 5 to 50 requests per 30 seconds). Sent only in the apiKey header; never placed in URLs or output.

string

CPE 2.3 prefix matched against applicability statements, including version ranges: cpe:2.3:a:apache:log4j (all versions) or cpe:2.3:a:apache:log4j:2.14.1 (that version).

string

One full CPE 2.3 name from NVD's CPE dictionary, e.g. cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*. Mutually exclusive with cpe_match.

string

CWE id, e.g. CWE-79, CWE-917, NVD-CWE-noinfo.

boolean

Only CVEs in CISA's Known Exploited Vulnerabilities catalog.

number

Records per page.

5 credits
Codefollows the fields above
const result = await firecrawl.scrape({
  alexandria: {
    provider: "nvd-nist-gov",
    capability: "vulnerabilities/search",
    options: {
      cwe_id: "CWE-917",
      in_kev: true,
      page_size: 3,
    },
  },
});
2Response example

This is a sample shape. Press Run to see live data from NIST National Vulnerability Database (NVD).

count
3
next_cursor
3
notice
This product uses the NVD API but is not endorsed or certified by the NVD.
nvd_timestamp
2026-10-08T01:27:28.206
observed_at_ms
1791423210643
source_url
https://services.nvd.nist.gov/rest/json/cves/2.0?cweId=CWE-917&hasKev&noRejected&resultsPerPage=3&startIndex=0
start_index
0
total_results
8
cpe_match_countcpe_matchescpe_matches_truncatedcve_idcve_tagscvsscvss_metricscwesdescriptionin_kevkevlast_modifiednvd_urlpublishedreference_countsource_identifierstatus
6falseCVE-2010-1871[]truenvd.nist.gov/vuln/detail/CVE-2010-187117cve@mitre.orgAnalyzed
1falseCVE-2020-10199[]truenvd.nist.gov/vuln/detail/CVE-2020-101999cve@mitre.orgAnalyzed
13falseCVE-2020-17530[]truenvd.nist.gov/vuln/detail/CVE-2020-1753023security@apache.orgAnalyzed

Quality, speed and cost, last 24 hours, across every agent call to NIST National Vulnerability Database (NVD) through Alexandria.

Quality
85.9%
Calls answered without a tool error
Speed
45.5 s
95% of successful calls finish faster
Cost
5 credits
Firecrawl credits per call
Calls
92
Last 24 hours, every Alexandria user
Quality and speed of each tool, last 24 hours
ToolQualitySpeedCalls
Cve79.6%45.5 s54
Search93.5%45.5 s31
Browse the library
//
Get started
//
Give your agent NIST National Vulnerability Database (NVD).
One API key for the live web and every provider in Alexandria.
Are you an AI agent? See setup options