---
title: "/api/vulnerabilities"
method: GET
path: "/api/vulnerabilities"
tags: ["vulnerabilities"]
---

# /api/vulnerabilities

`GET /api/vulnerabilities`

## Request

- Base URL: `https://vulnerabilityhistory.org`
- URL: `https://vulnerabilityhistory.org/api/vulnerabilities`
- Auth: none required
- TypeScript: <https://skmtc.dev/vulnerabilityhistoryproject/apis/vulnerability-history-project-restful-api/docs/api/vulnerabilities/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a non-detailed list of all vulnerabilities

## Query parameters

- `short_descriptions` boolean
- `limit` integer
- `offset` integer

## Response `200`

OK

- object[]
  - `id` integer: VHP's primary key. Subject to change without notice.
  - `cve` string: Unique, public identifier string
  - `announced` string: Parseable date format
  - `upvotes` integer: A community-generated measurement of how interesting this vulnerability is.
  - `nickname` string: A community-generated nickname, under 30 chars
  - `project_name` string: Title of the project this vulnerability is fromt
  - `subdomain` string: Shorthand name for the project, e.g. "httpd" instead of "Apache HTTPD Web Server"
  - `tag_json` object[]: List of tags associated with this vulnerability
    - `id` integer: VHP's primary key for the tag. Subject to change without notice. A current list of tag mappings can be found at /api/tags endpoint.
    - `importance` number: A subjective number calculated to visually prioritize tags according how important we think they are to this vulnerability's story.
  - `description` string

## Other responses

- `400`: Malformed request.
- `500`: Internal error. Please report these on our [issue tracker](https://github.com/VulnerabilityHistoryProject/vulnerability-history/issues).

## Changes

- **2023-03-15** `a9815c68a104`: 1 breaking, 1 info
  - the `items/tag_json/items/importance` response's property type changed from `integer` to `number`, and format from `int32` to no format for status `200`
  - api tag `vulnerabilities` added
- **2022-07-01** `8f9e734db157`: 9 info
  - added the optional property `items/announced` to the response with the `200` status
  - added the optional property `items/cve` to the response with the `200` status
  - added the optional property `items/description` to the response with the `200` status
  - added the optional property `items/id` to the response with the `200` status
  - …5 more
- **2022-07-01** `520c4d9ba9e9`: 9 warning, 1 info
  - removed the optional property `items/announced` from the response with the `200` status
  - removed the optional property `items/cve` from the response with the `200` status
  - removed the optional property `items/description` from the response with the `200` status
  - removed the optional property `items/id` from the response with the `200` status
  - …6 more

[Operation history](https://skmtc.dev/vulnerabilityhistoryproject/apis/vulnerability-history-project-restful-api/changes/api/vulnerabilities/get.md)

---

[API](https://skmtc.dev/vulnerabilityhistoryproject/apis/vulnerability-history-project-restful-api.md) - [All operations](https://skmtc.dev/vulnerabilityhistoryproject/apis/vulnerability-history-project-restful-api/llms.txt) - [OpenAPI document](https://skmtc.dev/vulnerabilityhistoryproject/apis/vulnerability-history-project-restful-api/revisions/2390172697da?raw)