v1

latestOpenAPI 3.1.02026-07-261690320.7 KB

Get CVE details

Get details about a CVE

get/cve/{cve_id}

Path parameters

cve_idstring required

Full CVE id to get the details. Aikido Intel ids start with AIKIDO- instead of CVE-

Response

Details about the CVE

cvestring

The identifier of this cve. Might also be an Aikido intel vulnerability.

related_cve_idstring

A secondary CVE when a CVE is later assigned to an issue already related to an Aikido intel vulnerability.

package_namestring

The name affected package related to this CVE.

languagestring

The language of the affected package related to this CVE.

short_descriptionstring

A short description explaining the CVE.

tldrstring

A more detailed description explaining the CVE.

does_this_affect_mestring

Additional info explaining the conditions of when an CVE is exploitable. Might be an empty string.

severity'Critical' | 'High' | 'Medium' | 'Low'

The severity in text related to this CVE.

severity_scoreinteger

The severity as an integer ranging from 0 to 100.

publishedstring

The date when this CVE was published.

Example response

{
  "cve": "AIKIDO-2026-10095",
  "related_cve_id": "CVE-2026-23864",
  "package_name": "next",
  "language": "JS",
  "short_description": "Attacker can trigger DOS-attack",
  "tldr": "Affected versions of the `react-server-dom-webpack`, `react-server-dom-parcel`, and `react-server-dom-turbopack` packages and frameworks that use the affected packages, including `Next.js` 13.x, 14.x, 15.x, and 16.x using the App Router are vulnerable to multiple denial of service (DoS) issues. The previously applied DoS mitigations were incomplete, allowing specially crafted HTTP requests to Server Function endpoints to trigger server crashes, out-of-memory conditions, or excessive CPU usage, depending on the code path and application configuration. Applications that do not use React Server Components or server-side React functionality are not affected.",
  "does_this_affect_me": "You are affected only if you are using a version within the vulnerable range and your application uses React Server Components. Applications that do not run React code on the server, or that do not use a framework, bundler, or bundler plugin supporting React Server Components, are not affected.",
  "severity": 75,
  "severity_score": "High",
  "patch_versions": [
    "16.2.0-canary.9",
    "16.1.5",
    "16.0.11",
    "15.6.0-canary.61",
    "15.5.10",
    "15.4.11",
    "15.3.9",
    "15.2.9",
    "15.1.1",
    "15.0.8"
  ],
  "published": "2026-01-27"
}