Sign in
securityhub

Get the vulnerability list.

Get the vulnerability list. use q to pass the query condition, supported conditions: cve_id(exact match) cvss_score_v3(range condition) severity(exact match) status(exact match) repository_name(exact match) project_id(exact match) package(exact match) tag(exact match) digest(exact match)

get/security/vul

Query parameters

qstring

Query string to query resources. Supported query patterns are "exact match(k=v)", "fuzzy match(k=v)", "range(k=[minmax])", "list with union releationship(k={v1 v2 v3})" and "list with intersetion relationship(k=(v1 v2 v3))". The value of range and list can be string(enclosed by " or '), integer or time(in format "2020-04-09 02:36:00"). All of these query patterns should be put in the query string "q=xxx" and splitted by ",". e.g. q=k1=v1,k2=v2,k3=[minmax]

pageinteger

The page number

page_sizeinteger

The size of per page

tune_countboolean

Enable to ignore X-Total-Count when the total count > 1000, if the total count is less than 1000, the real total count is returned, else -1.

with_tagboolean

Specify whether the tag information is included inside vulnerability information

Headers

X-Request-Idstring

An unique ID for the request

Response

The vulnerability list.

project_idinteger

the project ID of the artifact

repository_namestring

the repository name of the artifact

digeststring

the digest of the artifact

tagsstring[]

the tags of the artifact

cve_idstring

the CVE id of the vulnerability.

severitystring

the severity of the vulnerability

statusstring

the status of the vulnerability, example "fixed", "won't fix"

cvss_v3_scorenumber float

the nvd cvss v3 score of the vulnerability

packagestring

the package of the vulnerability

versionstring

the version of the package

fixed_versionstring

the fixed version of the package

descstring

The description of the vulnerability

linksstring[]

Links of the vulnerability

Changes