--- title: Free and open-source tracker of every public CVE | daily.dev description: CVE Ledger is a free, open-source tool that mirrors every public CVE, over 400,000 of them, and refreshes every 10 minutes from the CVE List, NVD, CISA KEV,... canonical: https://daily.dev/posts/free-and-open-source-tracker-of-every-public-cve-riu5rubme twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Free and open-source tracker of every public CVE | daily.dev og:description: CVE Ledger is a free, open-source tool that mirrors every public CVE, over 400,000 of them, and refreshes every 10 minutes from the CVE List, NVD, CISA KEV,... og:url: https://daily.dev/posts/free-and-open-source-tracker-of-every-public-cve-riu5rubme og:image: https://api.daily.dev/og/posts/riU5RubME.png og:image:alt: Free and open-source tracker of every public CVE og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Free and open-source tracker of every public CVE **[Daily Open Source Tools](https://daily.dev/sources/dailyopensourcetools)** · [@janszotkowski](https://daily.dev/janszotkowski) · 1 min read · 67 upvotes · 23 comments ## Summary CVE Ledger is a free, open-source tool that mirrors every public CVE, over 400,000 of them, and refreshes every 10 minutes from the CVE List, NVD, CISA KEV, FIRST EPSS and the GitHub Advisory Database. It needs no account, paid API or paywall. Each CVE gets its own page with CVSS scores, KEV status, EPSS history, SSVC and affected versions and packages. It offers CSV/JSON export, per-filter Atom feeds, a public JSON API, and Markdown plus llms.txt and WebMCP tools for AI agents. The author notes 2026 already has 90,227 published CVEs, nearly double 2025's 48,151. It runs on a Hono and SQLite backend with a TanStack Start frontend on a single Hetzner server, and is MIT licensed. ## Content CVE Ledger keeps its own copy of every public CVE (400k+) and refreshes it every 10 minutes from the CVE List, NVD, CISA KEV, FIRST EPSS and the GitHub Advisory Database. No account, no paid API, no paywall. What you get: - a timeline of CVEs per hour/day/month/year, stacked by severity - one filter for the chart and the list: text or CVE id, period, severity, known exploited only, vendor, product, package ecosystem - a page per CVE with every CVSS score, KEV entry, EPSS history, SSVC, affected versions and packages - CSV/JSON export, an Atom feed per filter and a public JSON API - Markdown per CVE, llms.txt and WebMCP tools for AI agents One number that surprised me: 2026 already has 90,227 published CVEs, almost double 2025 (48,151). Stack: Hono + SQLite backend, TanStack Start (SSR) frontend, one small Hetzner server behind a Cloudflare Tunnel. MIT licensed, feedback and PRs welcome. Live: [https://cveledger.app/](https://cveledger.app/) Code: [https://github.com/janszotkowski/cve-tracker](https://github.com/janszotkowski/cve-tracker) ## Community discussion Top comments from developers on daily.dev. **@warengonzaga** · 10 upvotes > Nice project! Thanks for building this. **@onlyread** · 6 upvotes > Almost double the CVEs in one year is wild! > Curious whether it's more bugs or just more CNAs publishing? **@warengonzaga** · 4 upvotes > Thanks for building this, I'm going to build a CLI for this. **@youssofk** · 4 upvotes > That's quite helpful actually! nice project and nice UI **@nosfair** · 3 upvotes > Really useful project, thanks for making it open source! > Combining CVSS, EPSS, and CISA KEV is a great step toward turning vulnerability data into actionable priorities. ## Similar posts on daily.dev - [CVE Tracker](https://daily.dev/posts/cve-tracker-meburfq75) · Hacker News · 46 upvotes · 3 comments - [The CVE spike across major software companies is a remediation problem](https://daily.dev/posts/the-cve-spike-across-major-software-companies-is-a-remediation-problem-eirfbzfqc) · Aikido Security · 0 upvotes · 0 comments - [A year of open source vulnerability trends: CVEs, advisories, and malware](https://daily.dev/posts/a-year-of-open-source-vulnerability-trends-cves-advisories-and-malware-xirztt4ff) · GitHub Blog · 0 upvotes · 0 comments - [New Data Tool Helps Orgs Prioritize Exploited Flaws Smarter](https://daily.dev/posts/new-data-tool-helps-orgs-prioritize-exploited-flaws-smarter-qf9r3f8hk) · Dark Reading · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#sqlite](https://daily.dev/tags/sqlite) [View this post on daily.dev](https://daily.dev/posts/free-and-open-source-tracker-of-every-public-cve-riu5rubme) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/free-and-open-source-tracker-of-every-public-cve-riu5rubme","headline":"Free and open-source tracker of every public CVE","text":"CVE Ledger is a free, open-source tool that mirrors every public CVE, over 400,000 of them, and refreshes every 10 minutes from the CVE List, NVD, CISA KEV, FIRST EPSS and the GitHub Advisory Database. It needs no account, paid API or paywall. Each CVE gets its own page with CVSS scores, KEV status, EPSS history, SSVC and affected versions and packages. It offers CSV/JSON export, per-filter Atom feeds, a public JSON API, and Markdown plus llms.txt and WebMCP tools for AI agents. The author notes 2026 already has 90,227 published CVEs, nearly double 2025's 48,151. It runs on a Hono and SQLite backend with a TanStack Start frontend on a single Hetzner server, and is MIT licensed.","url":"https://daily.dev/posts/free-and-open-source-tracker-of-every-public-cve-riu5rubme","datePublished":"2026-11-02T19:35:46.052Z","dateModified":"2026-11-08T14:16:14.597Z","author":{"@type":"Person","name":"Jan Szotkowski","url":"https://daily.dev/janszotkowski","image":"https://media.daily.dev/image/upload/s--C2OCTBDo--/f_auto/v1732402237/avatars/avatar_7RmhffQiFycZ8FLu2jRVz?_a=BAMAK+ZW0","worksFor":{"@type":"Organization","name":"RAYNET","logo":"https://media.daily.dev/image/upload/s--5bhbkw9c--/f_auto/v1756476693/companies/raynet"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"EndorseAction"},"userInteractionCount":1660}},"image":"https://media.daily.dev/image/upload/s--Bso23DAw--/f_auto,pg_1/v1793648146/posts/riU5RubME?_a=BAMAMiiw0","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":67},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":23}],"comment":[{"@type":"Comment","text":"Nice project! Thanks for building this.","datePublished":"2026-11-03T04:26:07.679Z","url":"https://daily.dev/posts/riU5RubME#c-eplNT5KZZ","author":{"@type":"Person","name":"Waren Gonzaga","url":"https://daily.dev/warengonzaga","image":"https://media.daily.dev/image/upload/s--1Tpga1P7--/f_auto/v1791019921/avatars/avatar_5dwfVl5B1?_a=BAMAMicg0"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":10}},{"@type":"Comment","text":"Almost double the CVEs in one year is wild!\nCurious whether it’s more bugs or just more CNAs publishing?","datePublished":"2026-11-04T13:23:03.275Z","url":"https://daily.dev/posts/riU5RubME#c-wWaGuJmxc","author":{"@type":"Person","name":"OnlyRead","url":"https://daily.dev/onlyread","image":"https://media.daily.dev/image/upload/s--tie3NwCL--/f_auto,pg_1/v1793569075/avatars/avatar_aMdscDAy0fCxDJbh829eu?_a=BAMAMiiw0"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":6}},{"@type":"Comment","text":"Thanks for building this, I’m going to build a CLI for this.","datePublished":"2026-11-03T04:26:30.504Z","url":"https://daily.dev/posts/riU5RubME#c-179XABhK7","author":{"@type":"Person","name":"Waren Gonzaga","url":"https://daily.dev/warengonzaga","image":"https://media.daily.dev/image/upload/s--1Tpga1P7--/f_auto/v1791019921/avatars/avatar_5dwfVl5B1?_a=BAMAMicg0"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4}},{"@type":"Comment","text":"That’s quite helpful actually! nice project and nice UI","datePublished":"2026-11-08T15:16:22.992Z","url":"https://daily.dev/posts/riU5RubME#c-FMlvo053o","author":{"@type":"Person","name":"Youssof. K.","url":"https://daily.dev/youssofk","image":"https://lh3.googleusercontent.com/a/AEdFTp7g7ng7R3Kda0v1EJGDbPfcVQASC20XcBnDNsE4=s96-c"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4}},{"@type":"Comment","text":"Really useful project, thanks for making it open source!\nCombining CVSS, EPSS, and CISA KEV is a great step toward turning vulnerability data into actionable priorities.","datePublished":"2026-11-08T18:50:45.934Z","url":"https://daily.dev/posts/riU5RubME#c-WJAnCgFn9","author":{"@type":"Person","name":"Thialon","url":"https://daily.dev/nosfair","image":"https://avatars.githubusercontent.com/u/70216808?v=4"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3}}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/squads/dailyopensourcetools","name":"Daily Open Source Tools"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Daily Open Source Tools","item":"https://daily.dev/squads/dailyopensourcetools"},{"@type":"ListItem","position":3,"name":"Free and open-source tracker of every public CVE"}]} ```