---
title: "Changes to Get a vulnerability"
method: GET
path: "/v1/vulnerabilities/{vulnerability_id}"
---

# Changes to Get a vulnerability

`GET /v1/vulnerabilities/{vulnerability_id}`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 3 of 5 revisions.

- **2026-08-10** `5f36bed372bb`: 1 info
- **2025-04-26** `b00b0798eebb`: 4 info
- **2024-04-12** `1146b360bd91`: 3 breaking, 2 warning, 9 info

## Changes

- **2026-08-10** `5f36bed372bb`: 1 info
  - added the optional property `epss_score` to the response with the `200` status
- **2025-04-26** `b00b0798eebb`: 4 info
  - added the optional property `cwe_ids` to the response with the `200` status
  - added the optional property `epss_percentile` to the response with the `200` status
  - added the optional property `epss_probability` to the response with the `200` status
  - added the optional property `known_exploited` to the response with the `200` status
- **2024-04-12** `1146b360bd91`: 3 breaking, 2 warning, 9 info
  - the response property `description` became nullable for the status `200`
  - the response property `url` became nullable for the status `200`
  - the response property `vuln_id` became nullable for the status `200`
  - removed the optional property `affected_releases` from the response with the `200` status
  - removed the optional property `recommendation` from the response with the `200` status
  - the security scope `organization` was added to the endpoint's security scheme `BearerAuth`
  - added the optional property `cvss_score` to the response with the `200` status
  - added the optional property `updated_at` to the response with the `200` status
  - the response property `description` became required for the status `200`
  - the response property `severity` became required for the status `200`
  - the response property `url` became required for the status `200`
  - the response property `vuln_id` became required for the status `200`
  - added the required property `affected_packages` to the response with the `200` status
  - added the required property `nist_url` to the response with the `200` status

---

[Operation](https://skmtc.dev/tidelift/apis/tidelift-external-api/docs/v1/vulnerabilities/:vulnerability_id/get.md) - [API](https://skmtc.dev/tidelift/apis/tidelift-external-api.md) - [Page](https://skmtc.dev/tidelift/apis/tidelift-external-api/changes/v1/vulnerabilities/:vulnerability_id/get)