{"slug":"cve-list-downloads","name":"CVE List downloads","host":"cve.mitre.org","site":"https://mitre.org","category":"data","docsUrl":null,"sources":[{"kind":"archive","url":"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/README.md"}],"url":"https://www.okapi.bot/providers/cve-list-downloads/","json":"https://www.okapi.bot/api/v1/providers/cve-list-downloads.json","breakingChanges":[{"slug":"the-legacy-cve-list-download-stops-working","api":"cve-list-downloads","title":"The legacy CVE List download stops working","kind":"removal","outcome":"fails","model":null,"announcedAt":null,"effectiveAt":"2024-06-30","scope":null,"calls":["GET /data/downloads/*"],"method":"GET","path":"/data/downloads/*","source":{"url":"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/README.md","kind":"archive"},"quote":"All support for the legacy CVE content download formats (i.e., CSV, HTML, XML, and CVRF) ended on June 30, 2024. These legacy download formats, which will no longer be updated and were phased out over the first six months of 2024, have been replaced by this repository as the only supported method for CVE Record downloads.","migration":"Download CVE Records in CVE JSON 5 format from the CVEProject/cvelistV5 GitHub repository (git clone, or its daily release zip files), or read them from the CVE Services API (GET https://cveawg.mitre.org/api/cve/{id}).","migrationChange":null,"needsDecision":"The replacement serves CVE JSON 5 records, not CSV or XML: the code reading the files must be rewritten for the new format.","text":{"summary":"On June 30, 2024, support ended for legacy CVE content download formats. Requests to GET /data/downloads/* fail because the legacy formats were phased out and are no longer updated. These endpoints previously served downloads in CSV, HTML, XML, and CVRF formats.","migration":"Download records in CVE JSON 5 format from the CVEProject/cvelistV5 GitHub repository using git clone or its daily release zip files, or query them from the CVE Services API at GET /api/cve/{id}. Moving requires more than updating an endpoint because the replacement provides CVE JSON 5 records rather than CSV or XML, requiring code that parses the files to be rewritten.","by":"writer"},"publishedAt":"2026-10-23T10:02:21.469Z","updatedAt":"2026-10-25T05:33:11.491Z","status":"in_effect","tone":"broken","url":"https://www.okapi.bot/providers/cve-list-downloads/breaking-changes/the-legacy-cve-list-download-stops-working/"}]}