Red Hat Security Data API

Red Hat Security Data API

Red Hat Product Security publishes its own CVE records, CSAF/VEX advisories and OVAL definitions via a keyless REST API and bulk files at access.redhat.com. A live CVE query confirms the service (CVE-2024-3094).

Coverage

Red Hat's own CVE records (severity, CVSS, CWE, affected packages and fix state), CSAF advisories and VEX files, confirmed live today via a CVE query (CVE-2024-3094) and a paginated CVE list query. OSV.dev aggregates Red Hat's OSV export among many sources; this entry is Red Hat's own primary feed with Red Hat-specific severity and product status. History start and update frequency: Not stated.

Verdict

Keyless REST API (plus bulk files) for Red Hat's own CVE records, CSAF advisories, VEX files and OVAL definitions (confirmed live today via a CVE query, CVE-2024-3094). Licensed CC-BY-4.0: the Security Data page says: "The data resources linked on this page as well as their alternative representations available through the Security Data API are licensed under the Creative Commons Attribution 4.0 International License." and: "If you distribute this content or a modified version of it, you must provide attribution to Red Hat and provide a link to the original." OSV.dev aggregates Red Hat's OSV export among many sources; this entry is Red Hat's own feed. Rate limits: Not stated. Signal Lab links only.