---
title: "List all current vulnerability policy violations for this Organization."
method: GET
path: "/orgs/{org}/vulnerability-policy-violation/"
tags: ["orgs"]
---

# List all current vulnerability policy violations for this Organization.

`GET /orgs/{org}/vulnerability-policy-violation/`

List all current vulnerability policy violations for this Organization.

## Query parameters

- `cursor` string
- `page_size` integer

## Response `200`

OK

- object
  - `next` string, uri, nullable
  - `previous` string, uri, nullable
  - `results` PackageVulnerabilityPolicyViolationLog[], required
    - `event_at` string, date-time
    - `package` PackageVulnerability, required
      - `identifier` string, required
      - `name` string, nullable — The name of this package.
      - `url` string, uri, nullable
      - `version` string, nullable — The raw version for this package.
    - `policy` NestedVulnerabilityPolicy, required
      - `allow_unknown_severity` boolean — Denotes whether vulnerabilities detected by a security scan with an unknown severity are permitted by this policy.
      - `created_at` string, date-time
      - `description` string, nullable
      - `min_severity` 'Low' | 'Medium' | 'High' | 'Critical'
      - `name` string
      - `on_violation_quarantine` boolean
      - `package_query_string` string, nullable
      - `slug_perm` string, slug
      - `updated_at` string, date-time
      - `url` string, uri
    - `reasons` string[], required
    - `vulnerability_scan_results` NestedVulnerabilityScanResults, required
      - `created_at` string, date-time — The time this scan result was stored.
      - `has_vulnerabilities` boolean — Do the results contain any known vulnerabilities?
      - `identifier` string, required
      - `max_severity` 'Unknown' | 'Low' | 'Medium' | 'High' | 'Critical'
      - `num_vulnerabilities` integer
      - `scan_id` integer, nullable, required — Deprecated (23-05-15): Please use 'identifier' instead. Previously: A monotonically increasing number that identified a scan within a repository.
      - `url` string, uri, nullable

## Other responses

- `400` — Request could not be processed (see detail).
- `422` — Missing or invalid parameters (see detail).

---

[API](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1.md) · [All operations](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cloudsmith/cloudsmith-api-v1/revisions/4d7879df9b2f/schema)