---
title: "Get a list of all package vulnerability policies."
method: GET
path: "/orgs/{org}/vulnerability-policy/"
tags: ["orgs"]
---

# Get a list of all package vulnerability policies.

`GET /orgs/{org}/vulnerability-policy/`

Get a list of all package vulnerability policies.

## Query parameters

- `page` integer
- `page_size` integer

## Response `200`

OK

- OrganizationPackageVulnerabilityPolicy[]
  - `allow_unknown_severity` boolean — Denotes whether vulnerabilities detected by a security scan with an unknown severity are permitted by this policy.
  - `created_at` string, date-time
  - `description` string, nullable
  - `min_severity` 'Low' | 'Medium' | 'High' | 'Critical'
  - `name` string, required
  - `on_violation_quarantine` boolean
  - `package_query_string` string, nullable
  - `slug_perm` string, slug
  - `updated_at` string, date-time

## Other responses

- `400` — Request could not be processed (see detail).
- `422` — Missing or invalid parameters (see detail).

---

[API](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1.md) · [All operations](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cloudsmith/cloudsmith-api-v1/revisions/4d7879df9b2f/schema)