Changelog

Three CVSS sources per CVE, Chrome in-the-wild flags and license lookup

September 30, 2026

CVE records keep CVSS scores from NVD, the CNA and CISA, and the top score is the highest of the three
An AI model reads Chrome release notes and flags the CVEs Google reports as exploited in the wild
The Package Metadata API, which returns the license on record for a package version, is now documented
CVE records from 20 more CNAs get CPE configurations, 56 CNAs since December

ImprovementsData QualityAPIAI

Exploitation data in audit results on every plan, plus Windows audit v4

August 31, 2026

Audit results can include exploitation status, CVSS, EPSS and CISA SSVC on every plan, free included
Windows audit v4 takes a host’s installed updates and returns one finding per missing update, with the KB to install
CPE matching API resolves raw software strings to CPE, with ranked alternatives
Rapid7’s vulnerability database and Acronis security advisories are new sources

New FeaturesAuditAPIData Sources

Python SDK 4.0 with an MCP server, Smart Audit beta and Watchlist alerts

July 31, 2026

Python SDK 4.0 with typed models, an async client and a built-in MCP server
The Vulners connector is part of the official OpenCTI connectors, marked Filigran Verified
Smart Audit (beta) finds vulnerabilities for free-form software names like “nginx 1.14 on windows”
Bookmarked bulletins go to your Watchlist, with email alerts when their severity changes or they become exploited in the wild

New FeaturesIntegrationsAPIMCP

Batch CVE audit and advisories from Kubernetes, HashiCorp and Grafana

June 30, 2026

Batch CVE audit takes up to 500 CVEs per request
CVE audit results include the affected CPE configurations next to the packages
Advisories from Kubernetes, HashiCorp, Grafana, Jenkins, Spring and curl, collected from each project
Subscription and archive family endpoints are documented in the API reference

New FeaturesAPIData Sources

Library and CVE audit APIs, plus advisories from Opera, Brave and Vivaldi

May 31, 2026

Library audit checks up to 2,500 packages per request by Package URL and returns the latest known fixed version
CVE audit returns the packages a CVE affects, with vulnerable version ranges and distribution scope
Collections endpoint lists every collection with its description, record count and last update
Security advisories from Opera, Brave and Vivaldi, plus Anthropic’s vulnerability disclosures

New FeaturesAPIAuditData Sources

Seven Linux distributions share one package data format

April 30, 2026

Debian, Ubuntu, Fedora, Mageia, Amazon Linux, Alpine and Arch Linux describe affected packages in one format
Debian and Ubuntu data comes from each distribution’s security tracker, and Ubuntu lists only confirmed packages
CVE records from six more CNAs, including ICS-CERT, Juniper, NVIDIA and SAP, get CPE configurations

ImprovementsAuditData Quality

SBOM AI summaries, PDF reports and transitive dependency advisories

March 31, 2026

SBOM reports get an AI-written summary that separates actively exploited from exploitable findings
PDF download for SBOM reports
Vulners OSV advisories flag packages potentially affected through a vulnerable dependency in PyPI, npm, Maven and Cargo
CISA KEV ransomware-use flag on KEV records and CVEs

New FeaturesSBOMAIData Sources

AI-enhanced descriptions, SBOM match details and full CVSS vectors

February 28, 2026

CVE pages show an AI-enhanced description, with a switch back to the original
Each CVE in an SBOM report names the advisories it was matched through
Bulletin pages spell out the full CVSS vector and list the advisory’s attachments
Fixed builds for Microsoft Office come from Microsoft’s own update list when MSRC leaves them out

ImprovementsWeb UISBOMAI

SBOM audit over the API, a redesigned SBOM Audit page and uv.lock

January 31, 2026

SBOM audit API for SPDX and CycloneDX JSON files up to 100 MB
Redesigned SBOM Audit page with an AI score filter and a step-by-step guide to generating an SBOM
Package audit accepts uv.lock files
Nozomi Networks security advisories are a new source

New FeaturesSBOMAPIData Sources

Complete design overhaul with new product structure and sections

November 25, 2025

Introduced a new site structure for better navigation and accessibility
Added dedicated sections for all products: Intelligence, Assessment, Datafeeds, Exploits & KEV, MCP, and White-Label solutions
Updated pages on data sources, API endpoints, and SDK integrations for clarity
Modernized overall design with improved responsiveness and user-friendly layouts

DesignUser ExperienceProducts

Real-time webhook subscriptions for vulnerability alerts

November 15, 2025

Full webhook subscription support for all alert types with easy setup
Instant notifications about new vulnerabilities, patches, and exploits
Enhanced web search functionality for faster and more accurate vulnerability queries

New FeaturesWebhooksAutomationAlerts

New package audit API with upgraded Linux host auditing

November 5, 2025

Brand new Package Audit API – audit any package format (maven, pip, poetry, npm, golang)
Instant detection of vulnerable packages with precise fix recommendations via the new API
Upgraded Linux audit

New FeaturesPackage AuditLinux

Major robots updates & OSV database upgrade

October 15, 2025

Fixed and significantly accelerated parsing robots: Rapid7 Blog, OpenSUSE, Fedora, HackerOne, Microsoft KB
Complete refresh and upgrade of the Google OSV (Open Source Vulnerabilities) database
Increased open-source vulnerability coverage by approximately 28%
Eliminated duplicates and reduced false positives to improve results

ImprovementsData QualityOSV

API key migration to header with enhanced search performance boost

October 2, 2025

API key now exclusively accepted via the x-api-key header (no longer in query parameters for improved security)
Search API responses accelerated by up to 40% through optimized indexing and caching
Fixed pagination bugs in /api/v3/search/lucene/ for smoother large-scale queries
Updated documentation and code examples

Recent ImprovementsAPIPerformance