---
title: "One release by version string"
method: GET
path: "/api/v1/{distribution}/versions/{version}"
tags: ["versions"]
---

# One release by version string

`GET /api/v1/{distribution}/versions/{version}`

## Request

- Base URL: `https://magento.watch`
- URL: `https://magento.watch/api/v1/{distribution}/versions/{version}`
- Auth: none required

Exact lookup by version key. Unlike the list endpoints, `data` holds the version object directly rather than a keyed map, and embeds a derived `security` summary (same shape as `/security` minus `distribution` and `version`).

## Path parameters

- `distribution` 'magento-community' | 'magento-commerce' | 'mage-os', required
- `version` string, required

## Response `200`

The requested release

- VersionResponse
  - `data` MagentoVersionWithSecurity, required
    - `version` string, required: Matches the key this object is stored under
    - `releaseDate` string, date, nullable, required
    - `eolDate` string, date, nullable, required
    - `systemRequirements` SystemRequirements, required: Map of kebab-case service key (`php`, `mysql`, `aws-aurora-mysql`, …) to the supported versions of that service. Fully populated per release — never inherited from a parent version.
    - `isEOLVersion` boolean, required: eolDate is in the past
    - `isSecureVersion` boolean, required: Neither EOL nor future-dated, so Adobe still ships security fixes for the line. Lifecycle only: it does not mean the release has no open security bulletins; see `securitySummary` or `security`.
    - `isLatestVersion` boolean, required: True for exactly one release per distribution
    - `isFutureVersion` boolean, required: releaseDate is in the future, or the version is an alpha, beta or RC pre-release
    - `statusLabel` 'pre-release' | 'upcoming' | 'supported (latest)' | 'supported' | 'security-only' | 'eol' | 'unknown', required
    - `security` VersionSecuritySummary, required: VersionSecurityReport without the distribution and version fields, embedded on single-version responses
      - `status` 'vulnerable' | 'secure' | 'eol' | 'unknown', required
      - `vulnerableTo` VersionSecurityBulletinRef[], required
        - `id` string, required
        - `severity` 'critical' | 'important' | 'moderate', required
        - `publishedDate` string, date, required
        - `cves` string[], required
        - `fixedIn` string, nullable, required
        - `isolatedPatches` IsolatedPatch[]
          - `id` string, required
          - `appliesTo` string[], required
          - `url` string, uri, required
      - `fixedBy` VersionSecurityBulletinRef[], required: Bulletins already fixed in this release, shipped in it or inherited from an earlier patch of the line. Nothing to install.
        - `id` string, required
        - `severity` 'critical' | 'important' | 'moderate', required
        - `publishedDate` string, date, required
        - `cves` string[], required
        - `fixedIn` string, nullable, required
        - `isolatedPatches` IsolatedPatch[]
          - `id` string, required
          - `appliesTo` string[], required
          - `url` string, uri, required
      - `recommendedVersion` string, nullable, required: Newest release of the same line, or this release when it is the newest. Not a verified safe target: it can have open bulletins of its own.
  - `_documentation` string, uri, required
  - `_description` string, required

## Other responses

- `404`: Unknown distribution slug or unknown version

---

[API](https://skmtc.dev/magento/apis/magento-watch-api.md) · [All operations](https://skmtc.dev/magento/apis/magento-watch-api/llms.txt) · [OpenAPI document](https://skmtc.dev/magento/apis/magento-watch-api/revisions/e542302fb8a0?raw)