---
title: "Get advisories for a package"
method: GET
path: "/akrites/packages/advisories"
tags: ["Packages"]
---

# Get advisories for a package

`GET /akrites/packages/advisories`

Returns a paginated list of security advisories for a single package identified by PURL. Intended for lazy-loading the Security tab in the package detail drawer.

## Query parameters

- `purl` string, required
- `page` integer
- `pageSize` integer
- `severity` string[]
- `resolution` string[]
- `critical` boolean

## Response `200`

Paginated advisory list.

- object
  - `page` integer, required
  - `pageSize` integer, required
  - `total` integer, required
  - `advisories` Advisory[], required
    - `osvId` string, required
    - `severity` 'critical' | 'high' | 'moderate' | 'low', nullable, required
    - `resolution` 'open' | 'patched', nullable, required
    - `isCritical` boolean, required — True when CVSS score >= 7.0.

## Other responses

- `400` — Validation error (malformed purl).
- `401` — Missing or invalid bearer token.
- `404` — Package not found.

## Changes

- **2026-06-24** (v1) `648aefbdca56` — 3 warning, 9 info
  - added the new `moderate` enum value to the `advisories/items/severity` response property for the response status `200`
  - added the new `open` enum value to the `advisories/items/resolution` response property for the response status `200`
  - added the new `patched` enum value to the `advisories/items/resolution` response property for the response status `200`
  - added the new optional `query` request parameter `critical`
  - …8 more
- **2026-06-17** (v1) `d70f9b3cb9d1` — 3 breaking, 6 warning, 3 info
  - removed the required property `advisories/items/isCritical` from the response with the `200` status
  - removed the required property `page` from the response with the `200` status
  - removed the required property `pageSize` from the response with the `200` status
  - deleted the `query` request parameter `critical`
  - …8 more

[Change history](https://skmtc.dev/linuxfoundation/apis/cdp-public-api-akrites/changes/akrites/packages/advisories/get.md)

---

[API](https://skmtc.dev/linuxfoundation/apis/cdp-public-api-akrites.md) · [All operations](https://skmtc.dev/linuxfoundation/apis/cdp-public-api-akrites/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/linuxfoundation/cdp-public-api-akrites/revisions/17bbb3d320c3/schema)