---
title: "Get all the CVE's associated with this channel"
method: GET
path: "/channels/{channel_name}/cves"
tags: ["channels", "cves"]
---

# Get all the CVE's associated with this channel

`GET /channels/{channel_name}/cves`

## Request

- Base URL: `https://api.anaconda.cloud/api`
- URL: `https://api.anaconda.cloud/api/channels/{channel_name}/cves`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Auth`
- TypeScript: <https://skmtc.dev/anaconda/apis/anaconda-server-api/docs/channels/:channel_name/cves/get.ts> (a function with typed inputs; its response is checked against the schema)

## Path parameters

- `channel_name` string, required

## Query parameters

- `offset` integer
- `limit` integer
- `status` CVEStatus[]
- `min_score` number
- `q` string
- `max_score` number
- `architectures` string[]
- `cve_name` string
- `version` string
- `min_packages_count` integer
- `artifact` string
- `sort` string[]
- `with_cve_counts_by_severity` boolean

## Response `200`

successfully returns the CVE objects related to this channel

- object
  - `total_count` number
  - `items` CVE[]
    - `id` string
    - `description` string: Text description of the vulnerability from the database
    - `score` number: Maximum score of the CVE
    - `cvssv2_score` number: CVSSv2 score of the CVE
    - `cvssv3_score` number: CVSSv3 score of the CVE
    - `curated` boolean: Indicates whether CVE has curated status
    - `packages_count` number: Number of associated packages with this CVE
    - `packages` object[]: optionals
      - `channel_name` string
      - `parent_channel_name` string
      - `cve_status` 'reported' | 'active' | 'mitigated' | 'cleared' | 'disputed' | 'unknown'
      - `artifact_family` 'anaconda_project' | 'anaconda_env' | 'cve' | 'conda' | 'python' | 'cran' | 'notebook' | 'docker' | 'sbom'
      - `artifact_type` string
      - `ckey` string
      - `common_name` string
      - `blob_sha256` string
      - `blob_size` string
    - `published_at` string: date when the CVE has been published in NVD
    - `nvd_modified_at` string: latest date when the CVE was updated in NVD
    - `anaconda_modified_at` string: latest date when the CVE was curated by Anaconda
    - `cvssv2` object
      - `cvssV2` object
        - `version` string
        - `vectorString` string
        - `accessComplexity` string
        - `accessVector` string
        - `authentication` string
        - `availabilityImpact` string
        - `baseScore` string
        - `confidentialityImpact` string
        - `integrityImpact` string
      - `exploitabilityScore` number
      - `impactScore` number
      - `severity` string
      - `obtainAllPrivilege` boolean
      - `obtainOtherPrivilege` boolean
      - `obtainUserPrivilege` boolean
      - `userInteractionRequired` boolean
    - `cvssv3` object
      - `cvssV3` object
        - `attackComplexity` string
        - `attackVector` string
        - `availabilityImpact` string
        - `baseScore` string
        - `baseSeverity` string
        - `confidentialityImpact` string
        - `integrityImpact` string
        - `privilegesRequired` string
        - `scope` string
        - `userInteraction` string
        - `vectorString` string
        - `version` string
      - `exploitabilityScore` number
      - `impactScore` number
    - `nvdv2` object
    - `reviews` object[]
    - `cwes` string[]
  - `cve_count_by_severity` CVEsBySeverity: CVE counts grouped by severity based on NVD classification
    - `critical` integer
    - `high` integer
    - `medium` integer
    - `low` integer
    - `none` integer

## Other responses

- `400`: Server cannot execute request due to something that is perceived to be a client error
- `401`: Unauthenticated, no token is provided or token is invalid
- `403`: Access is forbidden
- `500`: Internal server error

---

[API](https://skmtc.dev/anaconda/apis/anaconda-server-api.md) - [All operations](https://skmtc.dev/anaconda/apis/anaconda-server-api/llms.txt) - [OpenAPI document](https://skmtc.dev/anaconda/apis/anaconda-server-api/revisions/6aef0cb7a151?raw)