Public data, cleaned and merged. One key for all of it.

curl "https://api.elysianintelligence.com/cve/v1/cve/CVE-2021-44228" \
  -H "Authorization: Bearer $EP_KEY"

{
  "id": "CVE-2021-44228",
  "title": "Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints",
  "severity": {
    "cisa_adp": {
      "cvss3": {
        "score": 10,
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
      }
    }
  },
  "nvd_status": "analyzed",
  "ssvc": {
    "exploitation": "active",
    "automatable": "yes",
    "technical_impact": "total"
  },
  "kev": {
    "listed": true,
    "date_added": "2021-12-10",
    "due_date": "2021-12-24",
    "known_ransomware_campaign_use": "Known"
  },
  "epss": {
    "score": 0.99999,
    "percentile": 1
  },
  "osv": {
    "packages": [
      {
        "ecosystem": "Maven",
        "name": "org.apache.logging.log4j:log4j-core",
        "fixed_versions": [
          "2.15.0",
          "2.3.1",
          "2.12.2"
        ]
      }
    ]
  },
  "enrichment_gap": false
}

Shortened. Field names are the API's own; the values come from the public sources, read on 18 Oct 2026.