Query

Listing information about given vulnerability

Changed on

List (w/filters) vulnerability records known by the system, with affected packages information if present

get/query/vulnerabilities

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /query/vulnerabilities
  • Auth: none declared

Query parameters

idstring[] required

The ID of the vulnerability (e.g. CVE-1999-0001)

affected_packagestring

Filter results by specified package name (e.g. sed)

affected_package_versionstring

Filter results by specified package version (e.g. 4.4-1)

pagestring

The page of results to fetch. Pages start at 1

limitinteger

Limit the number of records for the requested page. If omitted or set to 0, return all results in a single page

namespacestring[]

Namespace(s) to filter vulnerability records by

Response

Vulnerability listing paginated

pagestring

The page number returned (should match the requested page query string param)

next_pagestring

True if additional pages exist (page + 1) or False if this is the last page

returned_countinteger

The number of items sent in this response

Example response

{
  "vulnerabilities": [
    {
      "nvd_data": [
        {
          "cvss_v3": {
            "base_score": 5.962133916683182,
            "impact_score": 2.3021358869347655,
            "exploitability_score": 5.637376656633329
          },
          "cvss_v2": {
            "base_score": 0.8008281904610115,
            "impact_score": 1.4658129805029452,
            "exploitability_score": 6.027456183070403
          },
          "id": "id"
        }
      ],
      "vendor_data": [
        {
          "cvss_v3": {
            "base_score": 5.962133916683182,
            "impact_score": 2.3021358869347655,
            "exploitability_score": 5.637376656633329
          },
          "cvss_v2": {
            "base_score": 0.8008281904610115,
            "impact_score": 1.4658129805029452,
            "exploitability_score": 6.027456183070403
          },
          "id": "id"
        }
      ]
    }
  ]
}

Changes

  • 38e5705e0b21Revision changes
    • breaking

      for the query request parameter id, the type changed from string to array

    • breaking

      the /// response's property type changed from no type to object for status

    • info

      api tag Query added

    • info

      api tag Vulnerabilities removed

    • info

      added the new optional query request parameter namespace

    • info

      added the optional property //////// to the response with the status

    • info

      added the optional property ////// to the response with the status

    • info

      added the optional property ////// to the response with the status

  • f0235c7ed0d5Revision changes
    • info

      added to the response body allOf list for the response status

    • info

      removed subschema #2 from the response body allOf list for the response status