Severity by Year Stats Examples · Example 1 of 5

Every CVE by Year and Severity

GEThttps://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year

Without parameters, the number of CVEs per year and severity across the whole database.

Without parameters the counts cover every CVE. cve_count_by_severity splits each year into critical, high, medium, low and other (no score).

What to Notice

cve_count is 396,067. 2026 has the most CVEs of any year, 70,790, of which 8,051 are critical.

Request

curl

curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year"

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "vendor": "",
  "product": "",
  "version": "",
  "cve_count": 396067,
  "cve_count_by_year": [
    {
      "year": 1988,
      "cve_count": 2,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 2,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1989,
      "cve_count": 3,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 2,
        "medium": 1,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1990,
      "cve_count": 11,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 8,
        "medium": 2,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 1991,
      "cve_count": 15,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 11,
        "medium": 4,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1992,
      "cve_count": 14,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 12,
        "medium": 0,
        "low": 1,
        "other": 1
      }
    },
    {
      "year": 1993,
      "cve_count": 13,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 8,
        "medium": 3,
        "low": 2,
        "other": 0
      }
    },
    {
      "year": 1994,
      "cve_count": 26,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 14,
        "medium": 10,
        "low": 1,
        "other": 1
      }
    },
    {
      "year": 1995,
      "cve_count": 25,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 17,
        "medium": 6,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 1996,
      "cve_count": 75,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 43,
        "medium": 21,
        "low": 9,
        "other": 1
      }
    },
    {
      "year": 1997,
      "cve_count": 253,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 143,
        "medium": 89,
        "low": 19,
        "other": 1
      }
    },
    {
      "year": 1998,
      "cve_count": 247,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 137,
        "medium": 85,
        "low": 23,
        "other": 1
      }
    },
    {
      "year": 1999,
      "cve_count": 923,
      "cve_count_by_severity": {
        "critical": 3,
        "high": 424,
        "medium": 356,
        "low": 111,
        "other": 29
      }
    },
    {
      "year": 2000,
      "cve_count": 1020,
      "cve_count_by_severity": {
        "critical": 2,
        "high": 454,
        "medium": 467,
        "low": 96,
        "other": 1
      }
    },
    {
      "year": 2001,
      "cve_count": 1679,
      "cve_count_by_severity": {
        "critical": 12,
        "high": 776,
        "medium": 706,
        "low": 182,
        "other": 3
      }
    },
    {
      "year": 2002,
      "cve_count": 2170,
      "cve_count_by_severity": {
        "critical": 10,
        "high": 1023,
        "medium": 980,
        "low": 143,
        "other": 14
      }
    },
    {
      "year": 2003,
      "cve_count": 1548,
      "cve_count_by_severity": {
        "critical": 9,
        "high": 674,
        "medium": 747,
        "low": 97,
        "other": 21
      }
    },
    {
      "year": 2004,
      "cve_count": 2479,
      "cve_count_by_severity": {
        "critical": 10,
        "high": 973,
        "medium": 1265,
        "low": 203,
        "other": 28
      }
    },
    {
      "year": 2005,
      "cve_count": 5010,
      "cve_count_by_severity": {
        "critical": 13,
        "high": 2048,
        "medium": 2430,
        "low": 441,
        "other": 78
      }
    },
    {
      "year": 2006,
      "cve_count": 6659,
      "cve_count_by_severity": {
        "critical": 11,
        "high": 2763,
        "medium": 3325,
        "low": 509,
        "other": 51
      }
    },
    {
      "year": 2007,
      "cve_count": 6596,
      "cve_count_by_severity": {
        "critical": 21,
        "high": 3162,
        "medium": 3101,
        "low": 232,
        "other": 80
      }
    },
    {
      "year": 2008,
      "cve_count": 5664,
      "cve_count_by_severity": {
        "critical": 19,
        "high": 2846,
        "medium": 2582,
        "low": 185,
        "other": 32
      }
    },
    {
      "year": 2009,
      "cve_count": 5778,
      "cve_count_by_severity": {
        "critical": 15,
        "high": 2734,
        "medium": 2786,
        "low": 197,
        "other": 46
      }
    },
    {
      "year": 2010,
      "cve_count": 4667,
      "cve_count_by_severity": {
        "critical": 28,
        "high": 2093,
        "medium": 2241,
        "low": 277,
        "other": 28
      }
    },
    {
      "year": 2011,
      "cve_count": 4172,
      "cve_count_by_severity": {
        "critical": 5,
        "high": 1784,
        "medium": 2100,
        "low": 261,
        "other": 22
      }
    },
    {
      "year": 2012,
      "cve_count": 5351,
      "cve_count_by_severity": {
        "critical": 21,
        "high": 1724,
        "medium": 3035,
        "low": 508,
        "other": 63
      }
    },
    {
      "year": 2013,
      "cve_count": 5324,
      "cve_count_by_severity": {
        "critical": 23,
        "high": 1734,
        "medium": 2913,
        "low": 517,
        "other": 137
      }
    },
    {
      "year": 2014,
      "cve_count": 8008,
      "cve_count_by_severity": {
        "critical": 20,
        "high": 1924,
        "medium": 5324,
        "low": 660,
        "other": 80
      }
    },
    {
      "year": 2015,
      "cve_count": 6595,
      "cve_count_by_severity": {
        "critical": 50,
        "high": 2352,
        "medium": 3503,
        "low": 589,
        "other": 101
      }
    },
    {
      "year": 2016,
      "cve_count": 6517,
      "cve_count_by_severity": {
        "critical": 887,
        "high": 2895,
        "medium": 2446,
        "low": 221,
        "other": 68
      }
    },
    {
      "year": 2017,
      "cve_count": 18113,
      "cve_count_by_severity": {
        "critical": 2111,
        "high": 6597,
        "medium": 5698,
        "low": 236,
        "other": 3471
      }
    },
    {
      "year": 2018,
      "cve_count": 18154,
      "cve_count_by_severity": {
        "critical": 2597,
        "high": 7542,
        "medium": 6203,
        "low": 168,
        "other": 1644
      }
    },
    {
      "year": 2019,
      "cve_count": 18938,
      "cve_count_by_severity": {
        "critical": 2635,
        "high": 7206,
        "medium": 7153,
        "low": 311,
        "other": 1633
      }
    },
    {
      "year": 2020,
      "cve_count": 19222,
      "cve_count_by_severity": {
        "critical": 2719,
        "high": 7681,
        "medium": 7498,
        "low": 424,
        "other": 900
      }
    },
    {
      "year": 2021,
      "cve_count": 21950,
      "cve_count_by_severity": {
        "critical": 2676,
        "high": 8566,
        "medium": 8463,
        "low": 444,
        "other": 1801
      }
    },
    {
      "year": 2022,
      "cve_count": 26431,
      "cve_count_by_severity": {
        "critical": 4247,
        "high": 10159,
        "medium": 10179,
        "low": 487,
        "other": 1359
      }
    },
    {
      "year": 2023,
      "cve_count": 30949,
      "cve_count_by_severity": {
        "critical": 4634,
        "high": 10956,
        "medium": 12802,
        "low": 423,
        "other": 2134
      }
    },
    {
      "year": 2024,
      "cve_count": 40704,
      "cve_count_by_severity": {
        "critical": 4300,
        "high": 14036,
        "medium": 20755,
        "low": 853,
        "other": 760
      }
    },
    {
      "year": 2025,
      "cve_count": 49972,
      "cve_count_by_severity": {
        "critical": 4174,
        "high": 15905,
        "medium": 24068,
        "low": 3099,
        "other": 2726
      }
    },
    {
      "year": 2026,
      "cve_count": 70790,
      "cve_count_by_severity": {
        "critical": 8051,
        "high": 28484,
        "medium": 25375,
        "low": 4805,
        "other": 4075
      }
    }
  ]
}

Content-Type: application/json
ratelimit-limit: 1
ratelimit-remaining: 0
ratelimit-reset: 1
x-ratelimit-limit-second: 1
x-ratelimit-remaining-second: 0
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

What this example sends. Every parameter is documented on Severity by Year Stats; the exact request is in the code panel.

This request sends no parameters.

Reference updated September 24, 2026