CVE lookups against the NVD 2.0 API, cross-referenced with the CISA Known Exploited Vulnerabilities (KEV) catalog.