{"key":"kev-cve","method":"GET","route":"/v1/kev/{cve}","price_usd":"0.003","price_sats":4,"request":{"method":"GET","path":"/v1/kev/CVE-2021-44228"},"arguments":{"cve":"CVE-2021-44228"},"response":{"data":{"cve":"CVE-2021-44228","in_kev":true,"vendor":"Apache","product":"Log4j2","name":"Apache Log4j2 Remote Code Execution Vulnerability","date_added":"2021-12-10","due_date":"2021-12-24","required_action":"For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.","known_ransomware":true,"notes_urls":["https://nvd.nist.gov/vuln/detail/CVE-2021-44228"],"catalog_version":"2026.10.10"},"meta":{"dataset":"kev","snapshot_id":"kev-20261009T060000Z-f4586cc5","as_of":"2026-10-09T06:00:00Z","retrieved_at":"2026-10-09T06:00:00.000Z","source":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","licence":"CC0-1.0","attribution":"Source: CISA Known Exploited Vulnerabilities Catalog (CC0 1.0). Not endorsed by CISA or DHS.","sha256":"f4586cc54bee30640f4364100eb70b7f25e4927f1d41d1ae92c0fea298508e74","key_id":"sf-test-1","manifest_url":"/v1/kev/manifest","stale":false,"notice":"Normalised (modified) from the source. Provided as is, without warranty. Not endorsed by the source.","sample":true}},"buy":{"method":"GET","url":"https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/kev/CVE-2021-44228","price_usd":"0.003","price_sats":4,"steps":["1. GET the url with no payment header: it returns 402 with the payment offer.","2. Pay the offer (x402, USDC) and sign it.","3. Retry the same request with the X-PAYMENT header: it returns 200 with the live, signed answer."]}}