# OpenSSL 3.0.x by Year

The CVEs that affect any OpenSSL 3.0 release, per year and severity.

Source: https://docs.deepinfo.com/reference/vulnerability/severity-by-year-stats/examples/version-startswith/

Last updated: 2026-09-24

---
`GET https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=openssl&product=openssl&version__startswith=3.0`

The CVEs that affect any OpenSSL 3.0 release, per year and severity.

Example 5 of 5 · [Severity by Year Stats Examples](/reference/vulnerability/severity-by-year-stats/examples/) · endpoint: [Severity by Year Stats](/reference/vulnerability/severity-by-year-stats/)

Tags: `vendor` `openssl` · `product` `openssl` · `version__startswith` `3.0`

`version__startswith` keeps the CVEs that affect any release whose version starts with the given text.

## What to Notice

`cve_count` is 70; 29 of them are from 2026.

## Request

| Parameter | In | Value |
|---|---|---|
| `vendor` | query | `openssl` |
| `product` | query | `openssl` |
| `version__startswith` | query | `3.0` |

```bash
curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=openssl&product=openssl&version__startswith=3.0' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'
```

## Response

### 200 · OK

`Content-Type: application/json` · `ratelimit-limit: 1` · `ratelimit-remaining: 0` · `ratelimit-reset: 1` · `x-ratelimit-limit-second: 1` · `x-ratelimit-remaining-second: 0` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a`

```json
{
  "vendor": "openssl",
  "product": "openssl",
  "version": "3.0",
  "cve_count": 70,
  "cve_count_by_year": [
    {
      "year": 2009,
      "cve_count": 4,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 4,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2010,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2011,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2012,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2013,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2014,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2015,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2016,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2017,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2018,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2019,
      "cve_count": 1,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 1,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2020,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2021,
      "cve_count": 1,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 1,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2022,
      "cve_count": 13,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 8,
        "medium": 4,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2023,
      "cve_count": 19,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 9,
        "medium": 10,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2024,
      "cve_count": 3,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 1,
        "medium": 2,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2025,
      "cve_count": 0,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 2026,
      "cve_count": 29,
      "cve_count_by_severity": {
        "critical": 4,
        "high": 16,
        "medium": 8,
        "low": 1,
        "other": 0
      }
    }
  ]
}
```

## Related Examples

- [OpenSSL 1.0.1 by Year](/reference/vulnerability/severity-by-year-stats/examples/vendor-product-version/)
- [OpenSSL CVEs by Year](/reference/vulnerability/severity-by-year-stats/examples/vendor-product/)