# CVE Record

One CVE record from the registry itself — description, CVSS score and severity, affected products and versions, and the reference links.

- Method: `GET`
- Path: `/v1/security/cve/{id}`

**Parameters**

| Name | Type | | Description |
|---|---|---|---|
| `id` | path segment | required | A CVE identifier. |
| `max_age` | integer (seconds) | optional | Ask for data no older than this. Clamped to the product's own floor, so it can narrow the window but never force a refresh on every call. |

**Example request**

```bash
curl https://api.diraz.ae/v1/security/cve/%7Bid%7D \
  -H "Authorization: Bearer drz_live_…"
```

**Example response**

```json
{
  "data": {
    "id": "CVE-2024-3094",
    "state": "Published",
    "title": null,
    "description": "XZ Utils 5.6.0 and 5.6.1 contain malicious code...",
    "cvss_score": 10,
    "cvss_severity": "CRITICAL",
    "cwe": ["CWE-506"],
    "affected_products": [
      { "vendor": "Tukaani", "product": "XZ", "versions": ["5.6.0", "5.6.1"] }
    ],
    "references": ["https://tukaani.org/xz-backdoor/"],
    "published_at": "2024-03-29T00:00:00.000Z",
    "updated_at": "2024-04-02T00:00:00.000Z"
  },
  "meta": {
    "request_id": "req_7Q2fK4mZ",
    "as_of": "2026-08-20T16:30:00.000Z",
    "age_seconds": 120,
    "next_update_at": "2026-08-20T17:00:00.000Z"
  }
}
```