CPE v2.3

Effective December 15, 2023, NVD will retire the CPE v2.2 legacy feed. Consequently, current products in SVR will be visible in both CPE v2.2 and CPE v2.3 naming formats during this transitional period. However, it's important to note that any new products added to SVR in the future will be displayed in the CPE v2.3 naming format, and the CPE v2.2 format only if available.

 

API

Description

/cpe23-products/

This API will return the entire list of CPEs v2.3 and when available, its associated product in SVR.

/advisories/

This API now returns a new property named cpes23. This new property contains the products in the CPE v2.3 naming format that are affected by the selected advisory.

/product-releases/

This API now returns a new property named cpes23. For the selected product, when available, the cpes23 property contains the CPE v2.3 naming format of the product.