---
title: "Get the system level allowlist of CVE."
method: GET
path: "/system/CVEAllowlist"
tags: ["SystemCVEAllowlist"]
---

# Get the system level allowlist of CVE.

`GET /system/CVEAllowlist`

Get the system level allowlist of CVE.  This API can be called by all authenticated users.

## Headers

- `X-Request-Id` string

## Response `200`

Successfully retrieved the CVE allowlist.

- CVEAllowlist — The CVE Allowlist for system or project
  - `id` integer — ID of the allowlist
  - `project_id` integer — ID of the project which the allowlist belongs to. For system level allowlist this attribute is zero.
  - `expires_at` integer, nullable — the time for expiration of the allowlist, in the form of seconds since epoch. This is an optional attribute, if it's not set the CVE allowlist does not expire.
  - `items` CVEAllowlistItem[]
    - `cve_id` string — The ID of the CVE, such as "CVE-2019-10164"
  - `creation_time` string, date-time — The creation time of the allowlist.
  - `update_time` string, date-time — The update time of the allowlist.

## Other responses

- `401` — Unauthorized
- `500` — Internal server error

---

[API](https://skmtc.dev/cerit/apis/harbor-api.md) · [All operations](https://skmtc.dev/cerit/apis/harbor-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cerit/harbor-api/revisions/62d78801f8df/schema)