---
title: "Update Vulnerability Status"
method: PATCH
path: "/v1/scans/vulns"
tags: ["scans"]
---

# Update Vulnerability Status

`PATCH /v1/scans/vulns`

Batch update vulnerability status

## Headers

- `X-Team-Id` string

## Request body

- object
  - `vuln_ids` string[]
  - `vuln_status` 'open' | 'false_positive' | 'fixed' | 'duplicate' | 'fix_in_progress' | 'accepted_risk' | 'triaged', required
  - `type` string
  - `scan_id` string
  - `severity` string[]
  - `host` string[]
  - `template` string[]
  - `search` string

## Response `200`

Example response

- object
  - `message` string, required

## Other responses

- `400` — Example response
- `401` — Example response
- `500` — Example response
- `default` — Example response

## Changes

- **2025-08-13** `c41cd7ae7718` — 1 info
  - added the new `triaged` enum value to the request property `vuln_status`
- **2024-09-22** `407b73d9ce28` — 1 breaking, 4 info
  - removed the enum value `closed` of the request property `vuln_status`
  - added the new optional `header` request parameter `X-Team-Id`
  - added the new `accepted_risk` enum value to the request property `vuln_status`
  - added the new `duplicate` enum value to the request property `vuln_status`
  - …1 more
- **2024-04-19** `ba8a20839440` — 27 info
  - the endpoint scheme security `X-API-Key` was added to the API
  - api tag `scans` added
  - added the new optional request property `host`
  - added the new optional request property `scan_id`
  - …23 more
- **2024-01-31** `4f557b176ebd` — 1 info
  - endpoint added
- **2023-12-05** `5c3748c387f7` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/projectdiscovery/apis/pdcp-api/changes/v1/scans/vulns/patch.md)

---

[API](https://skmtc.dev/projectdiscovery/apis/pdcp-api.md) · [All operations](https://skmtc.dev/projectdiscovery/apis/pdcp-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/projectdiscovery/pdcp-api/revisions/220f0adf9efd/schema)