← The evidence ledger
Evidence row 120838
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://saylorinnovations.com/api/vuln/epss-top
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 603070ba7a500234328584f39fc0c6749bfb91ce7886aa8c8b26a1bf4fc4fe69
- Leaf
- 0xea6c770418606a44c0797b8c283843551a6d706aae2112122c0b3d2ce58eba7e
What was observed
{
"endpoints": [
[
"x402",
"https://saylorinnovations.com/api/vuln/epss-top"
]
],
"name": "Saylor Innovations Data Desk",
"owner_address": "0xa2a8df0f7caabea4e120a2568118f141569fc8aa",
"raw": {
"accepts": [
{
"amount": "10000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:datadesk:epss-top-cves",
"name": "USD Coin",
"note": "Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:8453",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:datadesk:epss-top-cves",
"name": "USD Coin",
"note": "Polygon settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:137",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"assetTransferMethod": "eip3009",
"facilitatorOnly": true,
"memo": "saylor:datadesk:epss-top-cves",
"name": "USD Coin",
"note": "Arbitrum settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:42161",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb",
"memo": "saylor:datadesk:epss-top-cves",
"reference": "HH8G6pyzMpR2edLm15DKFXFjSqpgvzN2J9FfdbZbPoWh",
"session": "eyJhcnRpY2xlSWQiOiJkYXRhZGVzazplcHNzLXRvcC1jdmVzIiwicmVmZXJlbmNlIjoiSEg4RzZweXpNcFIyZWRMbTE1REtGWEZqU3FwZ3Z6TjJKOUZmZGJaYlBvV2giLCJyZWNpcGllbnQiOiI3TFNqZnJKZjhmTnNCOFZBOXU3TjNXRW4yNXNtUUxwb2IzU3Z5VXZYYWN5NyIsIm1pbnQiOiJFUGpGV2RkNUF1ZnFTU3FlTTJxTjF4enliYXBDOEc0d0VHR2tad3lURHQxdiIsIm1pbkFtb3VudCI6MTAwMDAsImV4cCI6MTc5MjQwMzkyNzk1M30.QI2e3b38SxjHSFjs2Kn9yFc06Jr2vLEwUZk-kgMDt94"
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
},
{
"amount": "10000",
"asset": "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB",
"extra": {
"feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb",
"memo": "saylor:datadesk:epss-top-cves",
"reference": "5UW9cBMavinY3BKsAs5ih8xFnLorswzB5U8oYGJoKcU",
"session": "eyJhcnRpY2xlSWQiOiJkYXRhZGVzazplcHNzLXRvcC1jdmVzIiwicmVmZXJlbmNlIjoiNVVXOWNCTWF2aW5ZM0JLc0FzNWloOHhGbkxvcnN3ekI1VThvWUdKb0tjVSIsInJlY2lwaWVudCI6IjdMU2pmckpmOGZOc0I4VkE5dTdOM1dFbjI1c21RTHBvYjNTdnlVdlhhY3k3IiwibWludCI6IkVzOXZNRnJ6YUNFUm1KZnJGNEgyRllENEtDb05rWTExTWNDZThCZW53TllCIiwibWluQW1vdW50IjoxMDAwMCwiZXhwIjoxNzkyNDAzOTI3OTUzfQ.QQb89lgbTftudPSbNUYqs3JgMD6Ym1NdTL7oK_qpLyw"
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
},
{
"amount": "91863",
"asset": "So11111111111111111111111111111111111111112",
"extra": {
"memo": "saylor:datadesk:epss-top-cves",
"native": true,
"note": "Native SOL: send lamports with a system transfer, not an SPL transfer. Price is quoted live and this quote expires in 120s.",
"quotedLamports": "94705",
"reference": "C8PsEGtYfbeUHdTKyLRAtDVKZxNdBwcphHzfvDYSrsw6",
"session": "eyJhcnRpY2xlSWQiOiJkYXRhZGVzazplcHNzLXRvcC1jdmVzIiwicmVmZXJlbmNlIjoiQzhQc0VHdFlmYmVVSGRUS3lMUkF0RFZLWnhOZEJ3Y3BoSHpmdkRZU3JzdzYiLCJyZWNpcGllbnQiOiI3TFNqZnJKZjhmTnNCOFZBOXU3TjNXRW4yNXNtUUxwb2IzU3Z5VXZYYWN5NyIsIm1pbnQiOm51bGwsIm1pbkFtb3VudCI6OTE4NjMsImV4cCI6MTc5MjQwMzkyNzk1NH0.J1AgsDRzvMQmnFhMdR1D7aVqU07R_fcGsb6YDhVg-vU",
"solUsdPrice": 105.59
},
"maxTimeoutSeconds": 120,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
"scheme": "exact"
}
],
"description": "The CVEs with the highest FIRST EPSS exploit probability today - 30-day exploitation chance, percentile and an NVD link for patch prioritisation",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"limit": "10"
},
"type": "http"
},
"output": {
"example": {
"as_of": "2026-10-16",
"count": 10,
"cves": [
{
"cve": "CVE-2025-53770",
"exploit_probability_30d_percent": 100,
"percentile": 99.99,
"rank": 1,
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53770"
},
{
"cve": "CVE-2024-7593",
"exploit_probability_30d_percent": 100,
"percentile": 99.99,
"rank": 2,
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7593"
},
{
"cve": "CVE-2024-3400",
"exploit_probability_30d_percent": 100,
"percentile": 100,
"rank": 3,
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3400"
},
{
"cve": "CVE-2024-23897",
"exploit_probability_30d_percent": 100,
"percentile": 100,
"rank": 4,
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23897"
},
{
"cve": "CVE-2024-21893",
"exploit_probability_30d_percent": 100,
"percentile": 100,
"rank": 5,
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21893"
},
{
"cve": "CVE-2024-21887",
"exploit_probability_30d_percent": 100,
"percentile": 100,
"rank": 6,
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21887"
},
{
"cve": "CVE-2023-4966",
"exploit_probability_30d_percent": 100,
"percentile": 100,
"rank": 7,
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4966"
},
{
"cve": "CVE-2023-44487",
"exploit_probability_30d_percent": 100,
"percentile": 100,
"rank": 8,
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487"
},
{
"cve": "CVE-2023-35082",
"exploit_probability_30d_percent": 100,
"percentile": 100,
"rank": 9,
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35082"
},
{
"cve": "CVE-2023-35078",
"exploit_probability_30d_percent": 100,
"percentile": 100,
"rank": 10,
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35078"
}
],
"note": "FIRST EPSS estimates the probability a CVE is exploited in the wild within 30 days; the very top of the list is dominated by long-lived, widely exploited bugs. Combine with the CVE and KEV routes for severity and patch status.",
"source": "FIRST EPSS",
"total_cves_scored": 390400
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"limit": {
"description": "optional 1-50, default 15",
"type": "string"
}
},
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"as_of": {
"description": "Date the figures are valid for",
"type": "string"
},
"count": {
"description": "Number of items returned",
"type": "number"
},
"cves": {
"description": "CVEs ranked by EPSS with 30-day exploit probability in percent, percentile and link",
"items": {
"properties": {
"cve": {
"description": "CVE identifier",
"type": [
"string",
"null"
]
},
"exploit_probability_30d_percent": {
"description": "Exploit probability 30d, as a percentage"
},
"percentile": {
"description": "EPSS percentile among all CVEs",
"type": [
"number",
"null"
]
},
"rank": {
"description": "Rank, 1 is highest"
},
"url": {
"description": "Canonical URL"
}
},
"type": "object"
},
"type": "array"
},
"note": {
"description": "Caveat or context for reading the result",
"type": "string"
},
"source": {
"description": "Data source the values come from",
"type": "string"
},
"total_cves_scored": {
"description": "Total cves scored",
"type": "number"
}
},
"required": [
"as_of",
"cves"
],
"type": "object"
},
"type": {
"const": "json",
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1791811517/bazaar-icons/bc5e2b3d111ebbef.jpg",
"lastUpdated": "2026-10-19T09:56:48.006Z",
"quality": {
"l30DaysTotalCalls": 2,
"l30DaysUniquePayers": 2,
"lastCalledAt": "2026-10-19T09:56:47.684Z"
},
"resource": "https://saylorinnovations.com/api/vuln/epss-top",
"serviceName": "Saylor Innovations Data Desk",
"tags": [
"most likely exploited cves",
"epss top vulnerabilities today",
"highest exploit probability cve",
"which cves to patch first",
"exploit prediction scoring"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "The CVEs with the highest FIRST EPSS exploit probability today - 30-day exploitation chance, percentile and an NVD link for patch prioritisation"
}What the leaf hashes
{"body":"603070ba7a500234328584f39fc0c6749bfb91ce7886aa8c8b26a1bf4fc4fe69","id":120838,"kind":"listing","method":"baseline/1","observed_us":1793025618884217,"prev":null,"subject":"x402_bazaar:https://saylorinnovations.com/api/vuln/epss-top","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0xea6c6befc1e6576c95915402f432f375c3c419ca4e907d654b28bef6cf5c99ea
- 0x0520d3c1c2929ca611cb10b7f2d6fc7f280a95511b0e3cec86b4ce44e9169ba5
- 0xcc65b2724855e4acc4b9c97c93dc28fdca7a0051065ff1e8587320fbdd76593b
- 0xfea5483dfe07812e6c513537d21b20afb47cf1a34273f2ebeffc6842d63bb9cd
- 0x2467344dda3796588c9d4314360a39ed8b0528c61d172fbe045204150494d653
- 0x6fade8fe7e2419ce2dc6efe4dfdb37fba706033c9349ea23245e6f2e33a70726
- 0x66bc341d83605e55c85ef243191abc2f95555481d2b328d9c81b54c89b31d1ed
- 0x2f2c592f1a2eaea23f5146ed9dd8de6b9713ce45b0c8a012752285832bfafa3b
- 0xd129cd07b8a3d70562218282fe5ee82be00a90fe319a2c19c4ad15e5f26d3290
- 0x0b1df5c288d250f6413df247eae63beacd780bb30cceb7665cb037a67632c66b
- 0xdcbb0cc500d2b659c111afe9a926b2aafdcc6f6d034768498b0b7295973f9245
- 0x22a204f0cf299dd3152f1542ba9998ff7665390da1ede6e58d06b8a7b2a107ee
- 0xec98ca25cb12ffed7c3e1373971719ce414ee6deecd1e7724b2979e2c356d99f
- 0x614d844c9e0509d9f9e63697aa2935555bce5f13695a8dc0047aa9e9898d70b3
- 0x95657a7d540ed6cac0bde9995782333b2562a9a6641853269ac95148827410f0
- 0x5fb5dda563336cd1bc1b9f44c52b76237ae72ed2145cb9290f39f304ca7dd678
- 0x74a0a08e4e7ab9aa5bfbead33dec7e1c7e8e364cff69a63720d764bbe987aadc
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae