Severity by Year Stats

GEThttps://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year

CVE counts per severity and year.

Request

curl

curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year"

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "vendor": "",
  "product": "",
  "version": "",
  "cve_count": 395222,
  "cve_count_by_year": [
    {
      "year": 1988,
      "cve_count": 2,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 2,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1989,
      "cve_count": 3,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 2,
        "medium": 1,
        "low": 0,
        "other": 0
      }
    }
  ]
}

Content-Type: application/json
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Authentication

Send your API key in the apikey request header.

Query Parameters

Parameter	Required	Description
`vendor`	Optional
`product`	Optional
`version`	Optional
`version__startswith`	Optional

Response Fields

Field	Type
`vendor`	string
`product`	string
`version`	string
`cve_count`	integer
`cve_count_by_year`	array of object

Response Schema

Inferred from examples Built from the saved 2xx example response: the fields it contains, with the types seen there. It is not a contract.

Field	Type	Example
`vendor`	string	`""`
`product`	string	`""`
`version`	string	`""`
`cve_count`	number	`395222`
`cve_count_by_year`	array<object>
`cve_count_by_year[].year`	number	`1988`
`cve_count_by_year[].cve_count`	number	`2`
`cve_count_by_year[].cve_count_by_severity`	object
`cve_count_by_year[].cve_count_by_severity.critical`	number	`0`
`cve_count_by_year[].cve_count_by_severity.high`	number	`2`
`cve_count_by_year[].cve_count_by_severity.medium`	number	`0`
`cve_count_by_year[].cve_count_by_severity.low`	number	`0`
`cve_count_by_year[].cve_count_by_severity.other`	number	`0`

Examples

The saved example from the Deepinfo API, shown in the request and response panels.

OKGET/explore/vulnerability-insight/vulnerability-severity-stats-by-year200 OK

Worked Examples

Worked examples of this endpoint, each on its own page with the exact request and the response it returns.

Every CVE by Year and SeverityWithout parameters, the number of CVEs per year and severity across the whole database.
OpenSSL CVEs by YearOpenSSL's CVEs per year and severity.

See all examples

Reference updated September 27, 2026