---
title: "Resolve which known vulnerabilities affect a specific version of a package"
method: GET
path: "/api/v1/databanks/{slug}/exposure"
tags: ["Data", "Provenance"]
---

# Resolve which known vulnerabilities affect a specific version of a package

`GET /api/v1/databanks/{slug}/exposure`

## Request

- Base URL: `https://api.daystruct.ai`
- URL: `https://api.daystruct.ai/api/v1/databanks/{slug}/exposure`
- Auth: one of:
  - none
  - HTTP bearer

Defined for the cybersecurity databank. Answers the question a maintainer actually asks -- I am running this version, what affects me -- rather than returning affected ranges to interpret. Findings are ordered worst first, with exploited-in-the-wild ahead of a higher score. Advisories whose affected range could not be read are returned under undetermined and are never counted as unaffected.

## Path parameters

- `slug` string, required

## Query parameters

- `package` string, required
- `version` string, required
- `ecosystem` string

## Headers

- `X-Daystruct-Client-Id` string
- `X-Daystruct-Agent` string
- `X-Daystruct-Use-Case` string
- `X-Daystruct-Agent-Id` string, uuid

## Response `200`

A bounded JSON envelope with pagination metadata.

## Other responses

- `400`: Invalid query.
- `429`: Rate limit exceeded.

---

[API](https://skmtc.dev/daystruct/apis/daystruct-api.md) · [All operations](https://skmtc.dev/daystruct/apis/daystruct-api/llms.txt) · [OpenAPI document](https://skmtc.dev/daystruct/apis/daystruct-api/revisions/8cd3c7f60e18?raw)