---
title: "Get the sighting correlations of a vulnerability"
method: GET
path: "/vulnerability/{vulnerability_id}/correlations"
tags: ["vulnerability"]
---

# Get the sighting correlations of a vulnerability

`GET /vulnerability/{vulnerability_id}/correlations`

## Request

- Base URL: `/api` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/vulnerability/{vulnerability_id}/correlations`
- Auth: API key in header `X-API-KEY`

The vulnerabilities sighted by the same sources as this one: for every source that filed a sighting of it (under either spelling of a CVE), the other vulnerabilities that source filed sightings of, most sighted first. Sources are matched exactly and counted over every sighting they filed; they come most correlated first (most related vulnerabilities, then most sightings of this one, then most recent), so the caps keep the strongest relationships. The Sighting correlations graph of the vulnerability page draws this document.

## Query parameters

- `sources` integer
- `per_source` integer

## Response `200`

Success.

- SightingCorrelations
  - `data` CorrelatedSource[]: The sources: most related vulnerabilities first, then most sightings, then most recent.
    - `content` string: That sighting's content, at most 1500 characters.
    - `content_truncated` boolean: The content was longer and has been cut.
    - `related` integer: Distinct other vulnerabilities this source sighted.
    - `seen` string: When that sighting was filed, RFC 3339 UTC.
    - `sightings` integer: Sightings of the vulnerability from this source.
    - `source` string: The sighting source; empty when the sightings named none.
    - `type` string: The type of the source's latest sighting of the vulnerability.
    - `vulnerabilities` string[]: The most sighted of them, up to per_source.
  - `metadata` object: vulnerability: the id served; sources: the sources of its sightings; shown_sources: how many data holds; per_source: the cap on related vulnerabilities per source.

## Changes

- **2026-10-28** `d8432b44794a`: 1 info
  - endpoint added
- **2026-10-28** `fdfc94d2a802`: 1 breaking
  - api path removed without deprecation
- **2026-10-13** `5a1ac406d70d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/changes/vulnerability/:vulnerability_id/correlations/get.md)

---

[API](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api.md) - [All operations](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/llms.txt) - [OpenAPI document](https://skmtc.dev/vulnerability-lookup/apis/vulnerability-lookup-api/revisions/b4dedf027493?raw)