Data
Every number on this site comes from these files. They are rebuilt daily; this export was generated Oct 25, 2026 (schema 0.5.0).
datasets.json lists every file with its row count, full SHA-256
checksum, and Iceberg snapshot. Verify a download with shasum -a 256 <file> against it; the table below shows the first characters.
vulnerabilities
One row per CVE, merging CISA KEV and NVD. 1,756 rows.
| File | Size | SHA-256 |
|---|---|---|
| vulnerabilities.parquet | 276 KB | 9737c142b6f8… |
| vulnerabilities.csv | 1.5 MB | 8c041cc358df… |
| vulnerabilities.json | 2.1 MB | 25d6cd7a1a14… |
kev_vendor_products
One row per KEV entry and affected vendor product. Start here. 1,754 rows.
| File | Size | SHA-256 |
|---|---|---|
| kev_vendor_products.parquet | 114 KB | 12b7494df01b… |
| kev_vendor_products.csv | 854 KB | d66d67c9ce3d… |
| kev_vendor_products.json | 1.5 MB | 4c929556dc04… |
vendors
Each curated vendor, whether it is a security vendor, and its KEV totals. 283 rows.
| File | Size | SHA-256 |
|---|---|---|
| vendors.parquet | 17 KB | 0b91d374290f… |
| vendors.csv | 75 KB | 2391f145a9cf… |
| vendors.json | 144 KB | e7ad1694ed17… |
security_vendor_kev_monthly
KEV additions per month, and how many are security vendors’. 60 rows.
| File | Size | SHA-256 |
|---|---|---|
| security_vendor_kev_monthly.parquet | 2 KB | 4764b94cde4c… |
| security_vendor_kev_monthly.csv | 3 KB | d10b4e80620c… |
| security_vendor_kev_monthly.json | 9 KB | d8c28afac43a… |
unresolved_vendor_names
Source vendor names that match no curated vendor. 2 rows.
| File | Size | SHA-256 |
|---|---|---|
| unresolved_vendor_names.parquet | 1 KB | 43b4d8ae435f… |
| unresolved_vendor_names.csv | 97 B | 0020588405f8… |
| unresolved_vendor_names.json | 171 B | 725b28d1de93… |
security_vendor_summary
Security vendors vs everyone else: the headline numbers. 2 rows.
| File | Size | SHA-256 |
|---|---|---|
| security_vendor_summary.parquet | 4 KB | 10e91806a735… |
| security_vendor_summary.csv | 392 B | 72d2d4c3f16f… |
| security_vendor_summary.json | 705 B | 44ed0da94365… |
Licenses and attribution
Compromise Ledger (https://github.com/csp4z/compromise-ledger), CC BY 4.0. Preserve source attribution and status labels; upstream sources keep their own terms.
| Source | License | Notice |
|---|---|---|
| CISA Known Exploited Vulnerabilities catalog (full JSON feed). | CC0-1.0 | — |
| NIST National Vulnerability Database: CVE records for CVEs in CISA KEV. | LicenseRef-NVD-Terms-of-Use | This product uses data from the NVD API but is not endorsed or certified by the NVD. |
| Curated vendor list and aliases (data/seeds/) | CC-BY-4.0 | — |
This product uses data from the NVD API but is not endorsed or certified by the NVD.
Unresolved vendor names
Vendor names from the sources that match no curated vendor. Their entries count toward totals but not toward any vendor.
- D-Link and TRENDnet (1 entry)
- Npm package (1 entry)