Vulnerability Intelligence

CVE lookups and patch prioritisation from three public sources in one call: the description, severity and affected packages from OSV.dev, confirmed in-the-wild exploitation from the CISA Known Exploited Vulnerabilities catalog with ransomware use and required actions, and the FIRST.org EPSS exploitation probability. Rank a list of CVEs for patching attention, search the KEV catalog by vendor or product, and read every answer with its sources named. These are public signals and not a determination about a system or an environment: absence from a catalog is reported as absence, never as safety.

Serves today. Built into ahel, nothing to set up.