Okapi Okapi

GET /data/downloads/* → endpoint removal

CVE List downloads

Stopped working

On June 30, 2024, support ended for legacy CVE content download formats. Requests to GET /data/downloads/* fail because the legacy formats were phased out and are no longer updated. These endpoints previously served downloads in CSV, HTML, XML, and CVRF formats.


Calls it hits

  • GET /data/downloads/*

What to use instead of these calls

Download records in CVE JSON 5 format from the CVEProject/cvelistV5 GitHub repository using git clone or its daily release zip files, or query them from the CVE Services API at GET /api/cve/{id}. Moving requires more than updating an endpoint because the replacement provides CVE JSON 5 records rather than CSV or XML, requiring code that parses the files to be rewritten.

The replacement serves CVE JSON 5 records, not CSV or XML: the code reading the files must be rewritten for the new format.

In CVE List downloads's words

All support for the legacy CVE content download formats (i.e., CSV, HTML, XML, and CVRF) ended on June 30, 2024. These legacy download formats, which will no longer be updated and were phased out over the first six months of 2024, have been replaced by this repository as the only supported method for CVE Record downloads.

CVE List downloads, Announcement

Facts

API
CVE List downloads cve.mitre.org
Kind
Endpoint removal
Takes effect
June 30, 2024
Calls after that day
Fail
Source
Announcement
Last updated
Verified
, against CVE List downloads's own pages

Questions

When does this change take effect?

Calls to GET /data/downloads/* on CVE List downloads stopped working on June 30, 2024.

What happens to calls after June 30, 2024?

They have failed since June 30, 2024.

How do I find the calls this hits in my code?

Okapi reads your repository, finds the calls this change hits and opens a pull request with the fix. It never commits to your branches: every change comes as a pull request you review.


You fixed this one by hand.

Okapi opens the pull request with the fix before the next breaking change reaches your code.

Add to GitHub