# ziro.sh

> Exploited vulnerabilities, mapped to the version that fixes them.

A small, human-reviewed feed of actively exploited and high-impact vulnerabilities, mapped to package names, affected version ranges and fix versions. Free JSON, RSS and Markdown for people and coding agents.

## This week (2026-44, Oct 26–Nov 1, 2026)

No records are published for this week yet. Records go live after the two-week private review run; every one is checked by a human against at least two sources.

## For agents

- [/feed.json](https://6b2fe323.ziro-sh.pages.dev/feed.json): Records from the last 30 days, newest first.
- [/records.json](https://6b2fe323.ziro-sh.pages.dev/records.json): Every published record.
- https://6b2fe323.ziro-sh.pages.dev/cve/{id}.json: One record by CVE or incident id.
- https://6b2fe323.ziro-sh.pages.dev/week/{yyyy-ww}.json: One ISO week of records.
- [/schema/record.v1.json](https://6b2fe323.ziro-sh.pages.dev/schema/record.v1.json): JSON Schema for a record.
- [/openapi.json](https://6b2fe323.ziro-sh.pages.dev/openapi.json): OpenAPI 3.1 description of these endpoints.
- [/rss.xml](https://6b2fe323.ziro-sh.pages.dev/rss.xml): RSS 2.0 feed of the last 30 days.
- [/llms.txt](https://6b2fe323.ziro-sh.pages.dev/llms.txt): Index of everything here, for language models.

Every HTML page also answers `Accept: text/markdown` with Markdown like this.

## What gets in

A record enters the feed when any of these is true:

- It is in the CISA Known Exploited Vulnerabilities catalog.
- Its EPSS exploit probability is above 0.5.
- A vendor advisory confirms exploitation in the wild.
- It affects a common stack: Node, Python, PHP, Go, Rust, Postgres, Redis, nginx, Cloudflare, AWS, Vercel or Railway.

Everything else stays out.

## More

- [About](https://6b2fe323.ziro-sh.pages.dev/about)
- [API docs](https://6b2fe323.ziro-sh.pages.dev/docs)
- [Contact](https://6b2fe323.ziro-sh.pages.dev/contact)
- [Privacy](https://6b2fe323.ziro-sh.pages.dev/privacy)

ziro.sh is not affiliated with the CVE Program, MITRE, CISA or any vendor named.