BRAINIAC.software API

Cybersecurity Intelligence

Independent API for vulnerability intelligence: CVE details, package vulnerability checks, batch queries, and risk assessments from OSV, CISA KEV, FIRST EPSS, and NVD.

POSThttps://brainiac.software/api/v1/cybersecurity-intelligence/vulnerability$0.02 USDC

Get vulnerability details

Retrieve details for a CVE or vulnerability ID from OSV, CISA KEV, FIRST EPSS, and NVD.

Body

Field	Required	Notes
`cveId`	Yes	string

Request exampleJSON

{
  "cveId": "CVE-2023-1234"
}

Response exampleJSON

{
  "retrievedAt": "2026-10-29T12:00:00.000Z",
  "cveId": "CVE-2023-1234",
  "vulnerability": {
    "cveId": "CVE-2023-1234",
    "aliases": [
      "GHSA-abc-123"
    ],
    "summary": "A buffer overflow vulnerability allows remote code execution.",
    "affectedPackages": [
      {
        "ecosystem": "PyPI",
        "name": "example-package",
        "versions": [
          "1.0.0",
          "1.0.1"
        ],
        "ranges": [
          {
            "type": "SEMVER",
            "events": [
              {
                "introduced": "0"
              },
              {
                "fixed": "1.0.2"
              }
            ]
          }
        ]
      }
    ],
    "cvssScore": 9.8,
    "cvssSeverity": "CRITICAL",
    "epssProbability": 0.95,
    "epssPercentile": 0.98,
    "epssDate": "2026-10-28",
    "kevStatus": "KNOWN_EXPLOITED",
    "kevProduct": "Example Product",
    "kevVendor": "Example Vendor",
    "kevRequiredAction": "Apply updates per vendor instructions.",
    "kevDueDate": "2026-11-15",
    "kevDateAdded": "2026-10-01",
    "ransomwareCampaignUse": true,
    "cweId": "CWE-119",
    "references": [
      {
        "type": "ADVISORY",
        "url": "https://example.com/advisory"
      }
    ],
    "timestamps": {
      "osvPublished": "2026-10-01T00:00:00.000Z",
      "osvModified": "2026-10-15T00:00:00.000Z",
      "nvdPublished": "2026-10-01T00:00:00.000Z",
      "nvdModified": "2026-10-15T00:00:00.000Z"
    }
  },
  "sources": {
    "osv": {
      "status": "OK",
      "url": "https://api.osv.dev/v1/query",
      "retrievedAt": "2026-10-29T12:00:00.000Z"
    },
    "cisa": {
      "status": "OK",
      "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
      "retrievedAt": "2026-10-29T11:55:00.000Z"
    },
    "epss": {
      "status": "OK",
      "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-1234",
      "retrievedAt": "2026-10-29T12:00:00.000Z"
    },
    "nvd": {
      "status": "OK",
      "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2023-1234",
      "retrievedAt": "2026-10-29T12:00:00.000Z"
    }
  },
  "limitations": [
    "OSV data comes from the OSV.dev API and may not include all vulnerability databases.",
    "CISA KEV data is cached for 5 minutes to avoid repeated requests.",
    "EPSS scores are from FIRST and may not reflect the latest probability.",
    "NVD API is rate-limited to 5 requests per 30 seconds without an API key."
  ]
}

cURL

curl -i -X POST "https://brainiac.software/api/v1/cybersecurity-intelligence/vulnerability" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "cveId": "CVE-2023-1234"
}
JSON

POSThttps://brainiac.software/api/v1/cybersecurity-intelligence/package/check$0.03 USDC

Check package vulnerabilities

Check one package and version for vulnerabilities using OSV, enriched with CISA KEV, EPSS, and NVD data.

Body

Field	Required	Notes
`ecosystem`	Yes	string
`package`	Yes	string
`version`	Yes	string

Request exampleJSON

{
  "ecosystem": "PyPI",
  "package": "requests",
  "version": "2.28.0"
}

Response exampleJSON

{
  "retrievedAt": "2026-10-29T12:00:00.000Z",
  "package": {
    "ecosystem": "PyPI",
    "name": "requests",
    "version": "2.28.0"
  },
  "vulnerabilities": [
    {
      "cveId": "CVE-2023-1234",
      "aliases": [
        "GHSA-abc-123"
      ],
      "summary": "A buffer overflow vulnerability allows remote code execution.",
      "affectedPackages": [
        {
          "ecosystem": "PyPI",
          "name": "requests",
          "versions": [
            "2.28.0"
          ],
          "ranges": [
            {
              "type": "SEMVER",
              "events": [
                {
                  "introduced": "2.28.0"
                },
                {
                  "fixed": "2.28.1"
                }
              ]
            }
          ]
        }
      ],
      "cvssScore": 9.8,
      "cvssSeverity": "CRITICAL",
      "epssProbability": 0.95,
      "epssPercentile": 0.98,
      "epssDate": "2026-10-28",
      "kevStatus": "KNOWN_EXPLOITED",
      "kevProduct": "requests",
      "kevVendor": "Python Software Foundation",
      "kevRequiredAction": "Apply updates per vendor instructions.",
      "kevDueDate": "2026-11-15",
      "kevDateAdded": "2026-10-01",
      "ransomwareCampaignUse": true,
      "cweId": "CWE-119",
      "references": [
        {
          "type": "ADVISORY",
          "url": "https://example.com/advisory"
        }
      ],
      "timestamps": {
        "osvPublished": "2026-10-01T00:00:00.000Z",
        "osvModified": "2026-10-15T00:00:00.000Z",
        "nvdPublished": "2026-10-01T00:00:00.000Z",
        "nvdModified": "2026-10-15T00:00:00.000Z"
      }
    }
  ],
  "source": {
    "url": "https://api.osv.dev/v1/query",
    "retrievedAt": "2026-10-29T12:00:00.000Z",
    "status": "OK"
  },
  "limitations": [
    "Results are limited to the first 50 vulnerabilities from OSV.",
    "EPSS and NVD data are fetched for each vulnerability and may be rate-limited.",
    "Not all vulnerabilities may have EPSS or NVD data available."
  ]
}

cURL

curl -i -X POST "https://brainiac.software/api/v1/cybersecurity-intelligence/package/check" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "ecosystem": "PyPI",
  "package": "requests",
  "version": "2.28.0"
}
JSON

POSThttps://brainiac.software/api/v1/cybersecurity-intelligence/package/batch-check$0.10 USDC

Batch check package vulnerabilities

Check multiple packages and versions for vulnerabilities using OSV batch query, enriched with CISA KEV, EPSS, and NVD data.

Body

Field	Required	Notes
`packages`	Yes	array; Array

Request exampleJSON

{
  "packages": [
    {
      "ecosystem": "PyPI",
      "package": "requests",
      "version": "2.28.0"
    },
    {
      "ecosystem": "npm",
      "package": "express",
      "version": "4.18.0"
    }
  ]
}

Response exampleJSON

{
  "retrievedAt": "2026-10-29T12:00:00.000Z",
  "results": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "requests",
        "version": "2.28.0"
      },
      "vulnerabilities": [
        {
          "cveId": "CVE-2023-1234",
          "aliases": [
            "GHSA-abc-123"
          ],
          "summary": "A buffer overflow vulnerability allows remote code execution.",
          "affectedPackages": [
            {
              "ecosystem": "PyPI",
              "name": "requests",
              "versions": [
                "2.28.0"
              ],
              "ranges": [
                {
                  "type": "SEMVER",
                  "events": [
                    {
                      "introduced": "2.28.0"
                    },
                    {
                      "fixed": "2.28.1"
                    }
                  ]
                }
              ]
            }
          ],
          "cvssScore": 9.8,
          "cvssSeverity": "CRITICAL",
          "epssProbability": 0.95,
          "epssPercentile": 0.98,
          "epssDate": "2026-10-28",
          "kevStatus": "KNOWN_EXPLOITED",
          "kevProduct": "requests",
          "kevVendor": "Python Software Foundation",
          "kevRequiredAction": "Apply updates per vendor instructions.",
          "kevDueDate": "2026-11-15",
          "kevDateAdded": "2026-10-01",
          "ransomwareCampaignUse": true,
          "cweId": "CWE-119",
          "references": [
            {
              "type": "ADVISORY",
              "url": "https://example.com/advisory"
            }
          ],
          "timestamps": {
            "osvPublished": "2026-10-01T00:00:00.000Z",
            "osvModified": "2026-10-15T00:00:00.000Z",
            "nvdPublished": "2026-10-01T00:00:00.000Z",
            "nvdModified": "2026-10-15T00:00:00.000Z"
          }
        }
      ],
      "source": {
        "status": "OK"
      }
    },
    {
      "package": {
        "ecosystem": "npm",
        "name": "express",
        "version": "4.18.0"
      },
      "vulnerabilities": [],
      "source": {
        "status": "OK"
      }
    }
  ],
  "source": {
    "url": "https://api.osv.dev/v1/querybatch",
    "retrievedAt": "2026-10-29T12:00:00.000Z",
    "status": "OK"
  },
  "limitations": [
    "Batch queries are limited to 20 packages per request.",
    "Each package is limited to the first 20 vulnerabilities from OSV.",
    "EPSS and NVD data are fetched for each vulnerability and may be rate-limited."
  ]
}

cURL

curl -i -X POST "https://brainiac.software/api/v1/cybersecurity-intelligence/package/batch-check" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "packages": [
    {
      "ecosystem": "PyPI",
      "package": "requests",
      "version": "2.28.0"
    },
    {
      "ecosystem": "npm",
      "package": "express",
      "version": "4.18.0"
    }
  ]
}
JSON

POSThttps://brainiac.software/api/v1/cybersecurity-intelligence/risk/assess$0.15 USDC

Assess vulnerability risk

Produce a consolidated vulnerability risk assessment for multiple packages, combining OSV, CISA KEV, EPSS, and NVD data.

Body

Field	Required	Notes
`packages`	Yes	array; Array

Request exampleJSON

{
  "packages": [
    {
      "ecosystem": "PyPI",
      "package": "requests",
      "version": "2.28.0"
    }
  ]
}

Response exampleJSON

{
  "retrievedAt": "2026-10-29T12:00:00.000Z",
  "assessment": {
    "overallRisk": "CRITICAL",
    "totalVulnerabilities": 5,
    "criticalCount": 2,
    "highCount": 1,
    "mediumCount": 1,
    "lowCount": 1,
    "kevCount": 2,
    "highEpssCount": 3,
    "packages": [
      {
        "package": {
          "ecosystem": "PyPI",
          "name": "requests",
          "version": "2.28.0"
        },
        "risk": "CRITICAL",
        "vulnerabilities": [
          {
            "cveId": "CVE-2023-1234",
            "aliases": [
              "GHSA-abc-123"
            ],
            "summary": "A buffer overflow vulnerability allows remote code execution.",
            "affectedPackages": [
              {
                "ecosystem": "PyPI",
                "name": "requests",
                "versions": [
                  "2.28.0"
                ],
                "ranges": [
                  {
                    "type": "SEMVER",
                    "events": [
                      {
                        "introduced": "2.28.0"
                      },
                      {
                        "fixed": "2.28.1"
                      }
                    ]
                  }
                ]
              }
            ],
            "cvssScore": 9.8,
            "cvssSeverity": "CRITICAL",
            "epssProbability": 0.95,
            "epssPercentile": 0.98,
            "epssDate": "2026-10-28",
            "kevStatus": "KNOWN_EXPLOITED",
            "kevProduct": "requests",
            "kevVendor": "Python Software Foundation",
            "kevRequiredAction": "Apply updates per vendor instructions.",
            "kevDueDate": "2026-11-15",
            "kevDateAdded": "2026-10-01",
            "ransomwareCampaignUse": true,
            "cweId": "CWE-119",
            "references": [
              {
                "type": "ADVISORY",
                "url": "https://example.com/advisory"
              }
            ],
            "timestamps": {
              "osvPublished": "2026-10-01T00:00:00.000Z",
              "osvModified": "2026-10-15T00:00:00.000Z",
              "nvdPublished": "2026-10-01T00:00:00.000Z",
              "nvdModified": "2026-10-15T00:00:00.000Z"
            }
          }
        ]
      }
    ]
  },
  "source": {
    "url": "https://api.osv.dev/v1/querybatch",
    "retrievedAt": "2026-10-29T12:00:00.000Z",
    "status": "OK"
  },
  "limitations": [
    "Risk assessment is based on available data from OSV, CISA, EPSS, and NVD.",
    "Missing CVSS or EPSS data may affect risk scoring.",
    "Assessment is not a definitive security evaluation; review each vulnerability individually."
  ]
}

cURL

curl -i -X POST "https://brainiac.software/api/v1/cybersecurity-intelligence/risk/assess" \
  -H 'content-type: application/json' \
  -H 'Idempotency-Key: <fresh-64-character-random-hex-key>' \
  --data-binary @- <<'JSON'
{
  "packages": [
    {
      "ecosystem": "PyPI",
      "package": "requests",
      "version": "2.28.0"
    }
  ]
}
JSON