# OpenSSL 1.0.1 by Year

The CVEs that affect OpenSSL 1.0.1, per year and severity.

Source: https://docs.deepinfo.com/reference/vulnerability/severity-by-year-stats/examples/vendor-product-version/

Last updated: 2026-09-24

---
`GET https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=openssl&product=openssl&version=1.0.1`

The CVEs that affect OpenSSL 1.0.1, per year and severity.

Example 4 of 5 · [Severity by Year Stats Examples](/reference/vulnerability/severity-by-year-stats/examples/) · endpoint: [Severity by Year Stats](/reference/vulnerability/severity-by-year-stats/)

Tags: `vendor` `openssl` · `product` `openssl` · `version` `1.0.1`

`version` keeps the CVEs whose affected range includes that exact release.

## What to Notice

`cve_count` is 82, from 2009 to 2021; 2016 has the most (26), after the release had been out for four years.

## Request

| Parameter | In | Value |
|---|---|---|
| `vendor` | query | `openssl` |
| `product` | query | `openssl` |
| `version` | query | `1.0.1` |

```bash
curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=openssl&product=openssl&version=1.0.1' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'
```

## Response

### 200 · OK

`Content-Type: application/json` · `ratelimit-limit: 1` · `ratelimit-remaining: 0` · `ratelimit-reset: 1` · `x-ratelimit-limit-second: 1` · `x-ratelimit-remaining-second: 0` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a`

```json
{
  "vendor": "openssl",
  "product": "openssl",
  "version": "1.0.1",
  "cve_count": 82,
  "cve_count_by_year": [
    {
      "year": 2009,
      "cve_count": 4,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 4,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2010,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2011,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2012,
      "cve_count": 2,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 1,
        "medium": 1,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2013,
      "cve_count": 4,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 3,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 2014,
      "cve_count": 22,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 5,
        "medium": 16,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 2015,
      "cve_count": 17,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 4,
        "medium": 12,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 2016,
      "cve_count": 26,
      "cve_count_by_severity": {
        "critical": 7,
        "high": 11,
        "medium": 8,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2017,
      "cve_count": 2,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 1,
        "medium": 1,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2018,
      "cve_count": 1,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 1,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2019,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2020,
      "cve_count": 3,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 0,
        "medium": 2,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2021,
      "cve_count": 1,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 1,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    }
  ]
}
```

## Related Examples

- [OpenSSL CVEs by Year](/reference/vulnerability/severity-by-year-stats/examples/vendor-product/)
- [OpenSSL 3.0.x by Year](/reference/vulnerability/severity-by-year-stats/examples/version-startswith/)