---
title: "Get channel CVE details"
method: GET
path: "/channels/{channel_name}/cves/{cve_id}"
tags: ["channels", "cves"]
---

# Get channel CVE details

`GET /channels/{channel_name}/cves/{cve_id}`

## Request

- Base URL: `https://api.anaconda.cloud/api`
- URL: `https://api.anaconda.cloud/api/channels/{channel_name}/cves/{cve_id}`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Auth`
- TypeScript: <https://skmtc.dev/anaconda/apis/anaconda-server-api/docs/channels/:channel_name/cves/:cve_id/get.ts> (a function with typed inputs; its response is checked against the schema)

## Path parameters

- `channel_name` string, required
- `cve_id` string, required

## Response `200`

successfully returns the channel's CVE detailss

- CVE: CVE information
  - `id` string
  - `description` string: Text description of the vulnerability from the database
  - `score` number: Maximum score of the CVE
  - `cvssv2_score` number: CVSSv2 score of the CVE
  - `cvssv3_score` number: CVSSv3 score of the CVE
  - `curated` boolean: Indicates whether CVE has curated status
  - `packages_count` number: Number of associated packages with this CVE
  - `packages` object[]: optionals
    - `channel_name` string
    - `parent_channel_name` string
    - `cve_status` 'reported' | 'active' | 'mitigated' | 'cleared' | 'disputed' | 'unknown'
    - `artifact_family` 'anaconda_project' | 'anaconda_env' | 'cve' | 'conda' | 'python' | 'cran' | 'notebook' | 'docker' | 'sbom'
    - `artifact_type` string
    - `ckey` string
    - `common_name` string
    - `blob_sha256` string
    - `blob_size` string
  - `published_at` string: date when the CVE has been published in NVD
  - `nvd_modified_at` string: latest date when the CVE was updated in NVD
  - `anaconda_modified_at` string: latest date when the CVE was curated by Anaconda
  - `cvssv2` object
    - `cvssV2` object
      - `version` string
      - `vectorString` string
      - `accessComplexity` string
      - `accessVector` string
      - `authentication` string
      - `availabilityImpact` string
      - `baseScore` string
      - `confidentialityImpact` string
      - `integrityImpact` string
    - `exploitabilityScore` number
    - `impactScore` number
    - `severity` string
    - `obtainAllPrivilege` boolean
    - `obtainOtherPrivilege` boolean
    - `obtainUserPrivilege` boolean
    - `userInteractionRequired` boolean
  - `cvssv3` object
    - `cvssV3` object
      - `attackComplexity` string
      - `attackVector` string
      - `availabilityImpact` string
      - `baseScore` string
      - `baseSeverity` string
      - `confidentialityImpact` string
      - `integrityImpact` string
      - `privilegesRequired` string
      - `scope` string
      - `userInteraction` string
      - `vectorString` string
      - `version` string
    - `exploitabilityScore` number
    - `impactScore` number
  - `nvdv2` object
  - `reviews` object[]
  - `cwes` string[]

## Other responses

- `400`: Server cannot execute request due to something that is perceived to be a client error
- `401`: Unauthenticated, no token is provided or token is invalid
- `403`: Access is forbidden
- `500`: Internal server error

---

[API](https://skmtc.dev/anaconda/apis/anaconda-server-api.md) - [All operations](https://skmtc.dev/anaconda/apis/anaconda-server-api/llms.txt) - [OpenAPI document](https://skmtc.dev/anaconda/apis/anaconda-server-api/revisions/6aef0cb7a151?raw)