Hello everyone!
I am using the tool openVulnQuery to pull the latest vulnerabilities from the PSIRT openVuln API for review and internal update alerts. In November this was still working and now it stopped providing current entries.
During my tests to exclude any mistakes on my side I found out that the API endpoint 'https://apix.cisco.com/security/advisories/v2/latest/1' provides a vulnerability published in 2018 and updated in August 2025 (Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability). Using the endpoint 'https://apix.cisco.com/security/advisories/v2/year/2025' to get all vulnerabilities of 2025 gives back just one entry dated back to January 2025 (Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability). Both results are far from what should be expected.
A query covering approx the last month ('https://apix.cisco.com/security/advisories/v2/all/firstpublished?startDate=2025-11-04&endDate=2025-12-08') returns {"errorCode":"NO_DATA_FOUND","errorMessage":"No data found"}. It should have returned 10 results, same as the web shows: Advanced Search.
I also checked the latest API documentation and change notes for hints that something is now different but with no result.
Is there something I may have overlooked or is this a case for the API support team?
Thank you!
Andreas
