---
title: "Changes to Get session vulnerabilities"
method: GET
path: "/session/{sessionID}/vulnerability"
---

# Changes to Get session vulnerabilities

`GET /session/{sessionID}/vulnerability`

> Every recorded change to this endpoint, newest first.

## Timeline

Changed in 5 of 102 revisions.

- **2026-08-06** `4e11f1aed2fd` — 1 info
- **2026-06-29** `e7837fb0de8f` — 3 warning, 2 info
- **2026-05-06** `e0c4f07da7b4` — 2 info
- **2026-03-17** `437a6ea5aeb3` — 1 info
- **2026-01-20** `c7ae6a68e4fb` — 1 breaking

## Changes

- **2026-08-06** `4e11f1aed2fd` — 1 info
  - added the optional property `items/candidate` to the response with the `200` status
- **2026-06-29** `e7837fb0de8f` — 3 warning, 2 info
  - added the new `approved` enum value to the `items/status` response property for the response status `200`
  - added the new `duplicate` enum value to the `items/status` response property for the response status `200`
  - added the new `new` enum value to the `items/status` response property for the response status `200`
  - added the optional property `items/duplicate_of` to the response with the `200` status
  - the `status` response's property default value changed from `open` to `new` for the status `200`
- **2026-05-06** `e0c4f07da7b4` — 2 info
  - added the optional property `items/attack_vector` to the response with the `200` status
  - added the optional property `items/endpoint` to the response with the `200` status
- **2026-03-17** `437a6ea5aeb3` — 1 info
  - endpoint added
- **2026-01-20** `c7ae6a68e4fb` — 1 breaking
  - api path removed without deprecation

---

[Operation](https://skmtc.dev/cyberstrikeus/apis/cyberstrike/docs/session/:sessionID/vulnerability/get.md) · [API](https://skmtc.dev/cyberstrikeus/apis/cyberstrike.md) · [Page](https://skmtc.dev/cyberstrikeus/apis/cyberstrike/changes/session/:sessionID/vulnerability/get)