VulnCheck Canary Intelligence makes it easy to query our canary data set with a number of API query parameters, useful for filtering the results. Supported API query parameters are as follows:
| Query Parameter | Description |
|---|---|
| cve | Filter based on CVE ID |
| src_country | Filter based on the attacks originating from a source country |
| dst_country | Filter based on the attacks on the destination country |
| date | Filter based on the date of the attack in YYYY-MM-DD format |
| src_ip | Filter based on the source IP address of the attack |
| src_asn | Filter based on the source ASN of the attack in AS12345 format |
| cidr | Filter based on a CIDR range e.g., 1.0.0.0/24 |
By combining two of the API query parameters (CVE and Date) we can quickly zoom in on a CVE being exploited on a specific date.
curl --request GET \
--url 'https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2024-5276&date=2025-10-17' \
--header 'Accept: application/json' \
--header 'Authorization: Bearer insert_token_here'
package main
import (
"context"
"encoding/json"
"fmt"
"log"
"os"
vulncheck "github.com/vulncheck-oss/sdk-go-v2/v2"
)
func main() {
configuration := vulncheck.NewConfiguration()
configuration.Scheme = "https"
configuration.Host = "api.vulncheck.com"
client := vulncheck.NewAPIClient(configuration)
token := os.Getenv("VULNCHECK_API_TOKEN")
auth := context.WithValue(
context.Background(),
vulncheck.ContextAPIKeys,
map[string]vulncheck.APIKey{
"Bearer": {Key: token},
},
)
resp, httpRes, err := client.IndicesAPI.IndexVulncheckCanariesGet(auth).Cve("CVE-2024-5276").Date("2025-10-17").Execute()
if err != nil || httpRes.StatusCode != 200 {
log.Fatal(err)
}
prettyJSON, err := json.MarshalIndent(resp.Data, "", " ")
if err != nil {
log.Fatalf("Failed to generate JSON: %v", err)
return
}
fmt.Println(string(prettyJSON))
}
import vulncheck_sdk
configuration = vulncheck_sdk.Configuration(host="https://api.vulncheck.com/v3")
configuration.api_key["Bearer"] = "insert_token_here"
with vulncheck_sdk.ApiClient(configuration) as api_client:
indices_client = vulncheck_sdk.IndicesApi(api_client)
api_response = indices_client.index_vulncheck_canaries_get(cve="CVE-2024-5276", date="2025-10-17")
print(api_response)
vulncheck index browse vulncheck-canaries --cve CVE-2024-5276 --date 2025-10-17
Query parameters can be combined freely — for example src_country and cidr together narrow results to a specific network range's activity originating from a specific country.