# cvegen.art

> a monthly series of generative posters, each one painted from every cve published that month. non-commercial. cve is a trademark of the mitre corporation.

every page is also served as markdown: add .md to its url, or request it with Accept: text/markdown. the data behind the posters is a plain json and csv download.

## Docs

- [home](https://cvegen.art/index.md): the latest poster and every month
- [method](https://cvegen.art/method.md): how a month of cves becomes a painting
- [data](https://cvegen.art/data.md): sources, definitions, what the numbers can't tell you
- [about](https://cvegen.art/about.md): who makes it and how the posters can be used

## Months

- [october 2026](https://cvegen.art/2026/10.md): 13,601 cves so far, still running, 14 used in real attacks
- [september 2026](https://cvegen.art/2026/09.md): 14,934 cves, 32 used in real attacks
- [august 2026](https://cvegen.art/2026/08.md): 12,260 cves, 20 used in real attacks
- [july 2026](https://cvegen.art/2026/07.md): 9,759 cves, 21 used in real attacks
- [june 2026](https://cvegen.art/2026/06.md): 7,949 cves, 26 used in real attacks
- [may 2026](https://cvegen.art/2026/05.md): 6,933 cves, 22 used in real attacks
- [april 2026](https://cvegen.art/2026/04.md): 5,813 cves, 14 used in real attacks
- [march 2026](https://cvegen.art/2026/03.md): 6,236 cves, 10 used in real attacks
- [february 2026](https://cvegen.art/2026/02.md): 4,616 cves, 20 used in real attacks
- [january 2026](https://cvegen.art/2026/01.md): 4,302 cves, 16 used in real attacks
- [december 2025](https://cvegen.art/2025/12.md): 5,493 cves, 23 used in real attacks
- [november 2025](https://cvegen.art/2025/11.md): 3,020 cves, 11 used in real attacks
- [october 2025](https://cvegen.art/2025/10.md): 4,274 cves, 10 used in real attacks
- [september 2025](https://cvegen.art/2025/09.md): 4,319 cves, 16 used in real attacks
- [august 2025](https://cvegen.art/2025/08.md): 3,629 cves, 12 used in real attacks
- [july 2025](https://cvegen.art/2025/07.md): 3,774 cves, 14 used in real attacks
- [june 2025](https://cvegen.art/2025/06.md): 3,682 cves, 18 used in real attacks
- [may 2025](https://cvegen.art/2025/05.md): 3,980 cves, 19 used in real attacks
- [april 2025](https://cvegen.art/2025/04.md): 4,033 cves, 16 used in real attacks
- [march 2025](https://cvegen.art/2025/03.md): 4,001 cves, 26 used in real attacks
- [february 2025](https://cvegen.art/2025/02.md): 3,673 cves, 15 used in real attacks
- [january 2025](https://cvegen.art/2025/01.md): 4,273 cves, 17 used in real attacks

## Data

the numbers behind the posters, free to reuse, listed with their sizes on the [data page](https://cvegen.art/data.md):

- `https://cvegen.art/data/months.json`: every month: published cves, critical, the busiest day, the biggest batches and each cve used in real attacks
- `https://cvegen.art/data/used-in-attacks.csv`: every cve on the cisa kev list, with its id, product and the dates it was published and listed

## Optional

- [llms-full.txt](https://cvegen.art/llms-full.txt): every page above in one file