Critical Severity
Published: Nov 10, 2026
Every public CVE in one place, free and open source: timeline, newest first, filters, scores, CISA KEV, EPSS and links to primary sources.
# CVE Ledger
**Every public CVE in one place, free and open source.** See how many vulnerabilities are published over time, browse the newest ones first, filter them down to what matters to you, and open any CVE for its scores, exploitation signals, affected products and links to the primary sources.
**Live at [cveledger.app](https://cveledger.app)**, with its public API at [api.cveledger.app](https://api.cveledger.app/v1/summary).
[](https://cveledger.app)
[](https://github.com/janszotkowski/cve-tracker/actions/workflows/ci.yml)
[](LICENSE)
[](https://glama.ai/mcp/connectors/app.trackcve.api/cve-tracker)
CVE Ledger keeps its own copy of the public sources (the CVE List, NVD, CISA KEV, FIRST EPSS, the GitHub Advisory Database, the public exploits of Metasploit, Nuclei and Exploit-DB, ENISA's EU Vulnerability Database and CIRCL's Vulnerability-Lookup sightings) and refreshes it every few minutes. It needs no paid API and no account, and runs on a single small server.
For terminal-first CVE tracking, try [CVE Tracker CLI](https://github.com/OSSPhilippines/cve-tracker-cli).
## ✨ Features
- **Every published CVE** (400,000+), refreshed every 10 minutes, with a timeline of how many are published per day, week, month or year, by severity.
- **One filter for the chart and the table**: search, period, severity, known exploited, vendor and product, package ecosystem, weakness (CWE) and CNA, all kept in a shareable URL.
- **A full page for every CVE**: every CVSS score, EPSS and its history, CISA KEV and EU KEV, public exploi