Data: CISA KEV Catalog, NVD (NIST). Both are U.S. Government public-domain feeds. Not security advice.