This endpoint delivers detailed information on a particular GHSA when you provide its unique GHSA ID.

Info

Changed on

Get information about a specific vulnerability by its GHSA ID.

Parameters:

  • ghsa_id (str): The GitHub Security Advisory identifier (e.g. GHSA-wcwp-r3fj-mm3p). Matching is case-insensitive.

Returns:

  • A GHSAWithCVE object with GHSA fields at the top level and linked vulnerability data nested under cve and euvd.
get/ghsa/{ghsa_id}

Request

  • Base URL: https://cvedb.shodan.io (the document declares no server; this is the origin it was published from)
  • URL: https://cvedb.shodan.io/ghsa/{ghsa_id}
  • Auth: none declared

Path parameters

ghsa_idstring required

Response

Successful Response

idstring required

The GitHub Security Advisory identifier.

summarystring nullable

A short advisory summary.

detailsstring nullable

The full advisory description.

published_timestring date-time nullable

When the advisory was published.

modified_timestring date-time nullable

When the advisory was last modified.

withdrawn_timestring date-time nullable

When the advisory was withdrawn, if applicable.

severityobject[]

Severity records supplied by GHSA.

affectedobject[]

Affected packages and version ranges.

referencesobject[]

Advisory reference links and types.

cwe_idsstring[]

Associated CWE identifiers.

github_severitystring nullable

GitHub's advisory severity rating.

github_reviewedboolean nullable

Whether GitHub reviewed the advisory.

github_reviewed_atstring date-time nullable

When GitHub reviewed the advisory.

Changes