GET /data/downloads/* → endpoint removal
Stopped working
On June 30, 2024, support ended for legacy CVE content download formats. Requests to GET /data/downloads/* fail because the legacy formats were phased out and are no longer updated. These endpoints previously served downloads in CSV, HTML, XML, and CVRF formats.
Calls it hits
GET /data/downloads/*
What to use instead of these calls
Download records in CVE JSON 5 format from the CVEProject/cvelistV5 GitHub repository using git clone or its daily release zip files, or query them from the CVE Services API at GET /api/cve/{id}. Moving requires more than updating an endpoint because the replacement provides CVE JSON 5 records rather than CSV or XML, requiring code that parses the files to be rewritten.
The replacement serves CVE JSON 5 records, not CSV or XML: the code reading the files must be rewritten for the new format.
In CVE List downloads's words
All support for the legacy CVE content download formats (i.e., CSV, HTML, XML, and CVRF) ended on June 30, 2024. These legacy download formats, which will no longer be updated and were phased out over the first six months of 2024, have been replaced by this repository as the only supported method for CVE Record downloads.
Facts
- API
- CVE List downloads
cve.mitre.org - Kind
- Endpoint removal
- Takes effect
- June 30, 2024
- Calls after that day
- Fail
- Source
- Announcement
- Last updated
- Verified
- , against CVE List downloads's own pages
Questions
When does this change take effect?
Calls to GET /data/downloads/* on CVE List downloads stopped working on June 30, 2024.
What happens to calls after June 30, 2024?
They have failed since June 30, 2024.
How do I find the calls this hits in my code?
Okapi reads your repository, finds the calls this change hits and opens a pull request with the fix. It never commits to your branches: every change comes as a pull request you review.
You fixed this one by hand.
Okapi opens the pull request with the fix before the next breaking change reaches your code.