---
title: "Update the system level allowlist of CVE."
method: PUT
path: "/system/CVEAllowlist"
tags: ["SystemCVEAllowlist"]
---

# Update the system level allowlist of CVE.

`PUT /system/CVEAllowlist`

This API overwrites the system level allowlist of CVE with the list in request body.  Only system Admin has permission to call this API.

## Headers

- `X-Request-Id` string

## Request body

- CVEAllowlist — The CVE Allowlist for system or project
  - `id` integer — ID of the allowlist
  - `project_id` integer — ID of the project which the allowlist belongs to. For system level allowlist this attribute is zero.
  - `expires_at` integer, nullable — the time for expiration of the allowlist, in the form of seconds since epoch. This is an optional attribute, if it's not set the CVE allowlist does not expire.
  - `items` CVEAllowlistItem[]
    - `cve_id` string — The ID of the CVE, such as "CVE-2019-10164"
  - `creation_time` string, date-time — The creation time of the allowlist.
  - `update_time` string, date-time — The update time of the allowlist.

## Response `200`

Successfully updated the CVE allowlist.

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `500` — Internal server error

---

[API](https://skmtc.dev/goharbor/apis/harbor-api.md) · [All operations](https://skmtc.dev/goharbor/apis/harbor-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/goharbor/harbor-api/revisions/62d78801f8df/schema)