MEmend
Findings - Project

Get libraries security findings

Changed on

Returns only the open source libraries with known vulnerabilities detected in a specified project.

get/api/v3.0/projects/{projectUuid}/dependencies/findings/security/groupBy/library

Request

Path parameters

projectUuidstring required

UUID of the project

Query parameters

limitstring

Specifies the maximum number of items to be returned in the response.

cursorstring

Parameter indicates the starting point for retrieving results, the first call doesn't include a cursor parameter in the request, the API response includes the first set of results along with a cursor pointing to the last item retrieved.

UUID or Name of a Zero-Day Event

Response

OK

additionalDataobject
  • totalItems: The total count of data points returned in an API response.
supportTokenstring

Example response

{
  "additionalData": {
    "totalItems": "422",
    "next": "http://someUrl?cursor=3",
    "cursor": 3
  },
  "supportToken": "1171c60d",
  "response": [
    {
      "component": {
        "uuid": "123e4567-e89b-12d3-a456-426655440000",
        "name": "dbus-1.10.24-13.el7_6.x86_64.rpm",
        "description": "Component description",
        "componentType": "Library",
        "libraryType": "REDHAT_PACKAGE_MODULE",
        "dependencyType": "Direct / Transitive",
        "references": {
          "url": "https://www.gnupg.org/related_software/pinentry/98",
          "homePage": "https://www.gnupg.org/related_software/pinentry/89",
          "downloadLink": "https://www.gnupg.org/related_software/pinentry/09",
          "issueUrl": "https://www.gnupg.org/related_software/pinentry/87",
          "pomUrl": "https://www.gnupg.org/related_software/pinentry/76",
          "scmUrl": "https://www.gnupg.org/related_software/pinentry/65",
          "genericPackageIndex": "5",
          "tags": "Important",
          "copyright": "Copyright 2002-2015 g10 Code GmbH"
        },
        "groupId": "org.springframework.boot",
        "artifactId": "spring-boot",
        "version": "3.0.5"
      },
      "language": "javascript/Node.js",
      "criticalNum": 22,
      "highNum": 22,
      "mediumNum": 22,
      "lowNum": 22,
      "total": 22,
      "suppressedNum": 22,
      "subRowsIds": [
        "cev-2020-234"
      ],
      "project": {
        "uuid": "123e4567-e89b-12d3-a456-426655440000",
        "name": "My Project",
        "path": "My Application",
        "applicationName": "My Application",
        "applicationUuid": "123e4567-e89b-12d3-a456-426655440000"
      },
      "application": {
        "uuid": "123e4567-e89b-12d3-a456-426655440000",
        "name": "Application A"
      },
      "comment": "no time to fix",
      "directName": "postcss-loader-3.0.0.tgz",
      "directNames": [
        "postcss-loader-3.0.0.tgz"
      ],
      "transitiveDependency": true,
      "exploitCodeMaturity": [
        "HIGH, POC_CODE"
      ],
      "exploitable": true,
      "numOfReachable": 22,
      "reachability": "15",
      "numOfMalicious": 22,
      "malicious": true,
      "violations": 22,
      "workflowUuids": [
        "2"
      ],
      "violatingFindings": 2
    }
  ]
}

Changes