Severity by Year Stats Examples · Example 2 of 5

CVEs of the Vendor Linux by Year

GEThttps://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year

The CVEs of every product of the vendor linux, mostly the Linux kernel, per year and severity.

Vendor: linux

vendor alone narrows the counts to the CVEs whose product list includes a product of that vendor; the response repeats vendor and leaves product empty.

What to Notice

cve_count is 19,107 since 1995, 40 more than the Linux kernel alone has (19,067 with product=linux_kernel on the same day). 2025 has the most (4,722), most of them medium (3,415).

Request

curl

curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=linux' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year"

params = {
    "vendor": "linux"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, params=params, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=linux";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=linux", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=linux"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=linux");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=linux',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=linux')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "vendor": "linux",
  "product": "",
  "version": "",
  "cve_count": 19107,
  "cve_count_by_year": [
    {
      "year": 1995,
      "cve_count": 1,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 1,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1996,
      "cve_count": 2,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 1,
        "medium": 1,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1997,
      "cve_count": 10,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 1,
        "medium": 8,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 1998,
      "cve_count": 10,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 4,
        "medium": 3,
        "low": 3,
        "other": 0
      }
    },
    {
      "year": 1999,
      "cve_count": 19,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 5,
        "medium": 10,
        "low": 4,
        "other": 0
      }
    },
    {
      "year": 2000,
      "cve_count": 5,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 2,
        "medium": 2,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 2001,
      "cve_count": 23,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 5,
        "medium": 5,
        "low": 13,
        "other": 0
      }
    },
    {
      "year": 2002,
      "cve_count": 15,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 4,
        "medium": 2,
        "low": 9,
        "other": 0
      }
    },
    {
      "year": 2003,
      "cve_count": 28,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 6,
        "medium": 14,
        "low": 8,
        "other": 0
      }
    },
    {
      "year": 2004,
      "cve_count": 52,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 17,
        "medium": 12,
        "low": 23,
        "other": 0
      }
    },
    {
      "year": 2005,
      "cve_count": 134,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 26,
        "medium": 48,
        "low": 60,
        "other": 0
      }
    },
    {
      "year": 2006,
      "cve_count": 91,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 24,
        "medium": 43,
        "low": 24,
        "other": 0
      }
    },
    {
      "year": 2007,
      "cve_count": 105,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 39,
        "medium": 49,
        "low": 17,
        "other": 0
      }
    },
    {
      "year": 2008,
      "cve_count": 98,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 42,
        "medium": 46,
        "low": 10,
        "other": 0
      }
    },
    {
      "year": 2009,
      "cve_count": 128,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 49,
        "medium": 69,
        "low": 10,
        "other": 0
      }
    },
    {
      "year": 2010,
      "cve_count": 193,
      "cve_count_by_severity": {
        "critical": 4,
        "high": 85,
        "medium": 66,
        "low": 38,
        "other": 0
      }
    },
    {
      "year": 2011,
      "cve_count": 156,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 72,
        "medium": 62,
        "low": 22,
        "other": 0
      }
    },
    {
      "year": 2012,
      "cve_count": 227,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 103,
        "medium": 95,
        "low": 28,
        "other": 0
      }
    },
    {
      "year": 2013,
      "cve_count": 280,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 97,
        "medium": 138,
        "low": 44,
        "other": 0
      }
    },
    {
      "year": 2014,
      "cve_count": 234,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 113,
        "medium": 98,
        "low": 22,
        "other": 0
      }
    },
    {
      "year": 2015,
      "cve_count": 431,
      "cve_count_by_severity": {
        "critical": 9,
        "high": 316,
        "medium": 88,
        "low": 18,
        "other": 0
      }
    },
    {
      "year": 2016,
      "cve_count": 474,
      "cve_count_by_severity": {
        "critical": 18,
        "high": 339,
        "medium": 116,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 2017,
      "cve_count": 628,
      "cve_count_by_severity": {
        "critical": 35,
        "high": 379,
        "medium": 209,
        "low": 5,
        "other": 0
      }
    },
    {
      "year": 2018,
      "cve_count": 282,
      "cve_count_by_severity": {
        "critical": 14,
        "high": 117,
        "medium": 148,
        "low": 3,
        "other": 0
      }
    },
    {
      "year": 2019,
      "cve_count": 394,
      "cve_count_by_severity": {
        "critical": 39,
        "high": 165,
        "medium": 176,
        "low": 14,
        "other": 0
      }
    },
    {
      "year": 2020,
      "cve_count": 244,
      "cve_count_by_severity": {
        "critical": 15,
        "high": 80,
        "medium": 142,
        "low": 7,
        "other": 0
      }
    },
    {
      "year": 2021,
      "cve_count": 429,
      "cve_count_by_severity": {
        "critical": 20,
        "high": 195,
        "medium": 204,
        "low": 10,
        "other": 0
      }
    },
    {
      "year": 2022,
      "cve_count": 592,
      "cve_count_by_severity": {
        "critical": 36,
        "high": 243,
        "medium": 298,
        "low": 15,
        "other": 0
      }
    },
    {
      "year": 2023,
      "cve_count": 611,
      "cve_count_by_severity": {
        "critical": 33,
        "high": 270,
        "medium": 294,
        "low": 14,
        "other": 0
      }
    },
    {
      "year": 2024,
      "cve_count": 4528,
      "cve_count_by_severity": {
        "critical": 31,
        "high": 1233,
        "medium": 3216,
        "low": 48,
        "other": 0
      }
    },
    {
      "year": 2025,
      "cve_count": 4722,
      "cve_count_by_severity": {
        "critical": 32,
        "high": 1243,
        "medium": 3415,
        "low": 32,
        "other": 0
      }
    },
    {
      "year": 2026,
      "cve_count": 3961,
      "cve_count_by_severity": {
        "critical": 273,
        "high": 1733,
        "medium": 1914,
        "low": 41,
        "other": 0
      }
    }
  ]
}

Content-Type: application/json
ratelimit-limit: 1
ratelimit-remaining: 0
ratelimit-reset: 1
x-ratelimit-limit-second: 1
x-ratelimit-remaining-second: 0
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

What this example sends. Every parameter is documented on Severity by Year Stats; the exact request is in the code panel.

Parameter	Value
`vendor`query	`linux`

Reference updated September 24, 2026