API and monitoring check

Read-only, no key required. Please cache responses and do not poll more often than every 10 minutes.

List of advisories

GET https://proxmoxcve.com/api/advisories.json?product=pve&since=2026-01-01&limit=100

Newest first, up to 500 entries. Each entry contains CVEs with CVSS, “actively exploited” (CISA KEV) and EPSS, the affected packages and the fixed versions.

Single advisory in OSV format

GET https://proxmoxcve.com/api/osv/PSA-2026-00019-1.json

OSV is a common open format for vulnerability data, readable by many scanners and tools.

Is a host affected?

pveversion -v | curl -s -H 'Content-Type: text/plain' --data-binary @- https://proxmoxcve.com/api/check

Returns the advisories that affect the posted package versions as JSON. The same check is available as a web page.

Nagios / Icinga / Checkmk check

curl -o /usr/local/lib/nagios/plugins/check_proxmox_advisories https://proxmoxcve.com/contrib/check_proxmox_advisories.sh
chmod +x /usr/local/lib/nagios/plugins/check_proxmox_advisories
/usr/local/lib/nagios/plugins/check_proxmox_advisories https://proxmoxcve.com

Runs on the Proxmox host and reports OK, WARNING or CRITICAL (CVSS 7 or higher, or actively exploited).

RSS

All advisories: https://proxmoxcve.com/feed.xml. Per product: pve, pbs and so on.