---
title: "Return all devices"
method: GET
path: "/devices"
tags: ["Devices"]
---

# Return all devices

`GET /devices`

## Request

- Base URL: `https://api.xfa.tech`
- URL: `https://api.xfa.tech/devices`
- Auth: HTTP bearer

## Query parameters

- `organization_id` string, required
- `policyId` string
- `add_cves` string
- `use_decisions` string

## Response `200`

Returns all devices

- ListDevicesWithIdentityResponse
  - `devices` DeviceWithIdentity[]
    - `admin_mfa_approval_status` 'PENDING' | 'APPROVED' | 'REJECTED': Coarse administrator MFA approval badge visible only to Administrators.
    - `device_id` string, required: ID of the device
    - `timestamp_submitted` integer, required: Timestamp when the device was submitted (max of verified and discovery)
    - `timestamp_submitted_verified` integer: Timestamp when the device was last submitted by the XFA agent (verified device)
    - `timestamp_submitted_discovery` integer: Timestamp when the device was last submitted by a discovery provider (Microsoft, Google, Okta, etc.)
    - `user` User
      - `username` string, required: Username of the user
      - `full_name` string, required: Full name of the user
    - `computer_name` ComputerName
      - `name` string, required: Name of the computer
    - `battery` object
      - `cycle_count` integer: Battery cycle count
      - `health` string: Battery health status
      - `max_capacity` number, float: Maximum battery capacity as a percentage
    - `os_name` string: Name of the operating system
    - `os_version` string: Version of the operating system
    - `os_build_number` string: Build number of the operating system (e.g. for iOS)
    - `os_flavour` string: Flavour of the operating system
    - `os_is_lts` boolean: Whether the operating system is a long-term-support release (Ubuntu LTS / ESM)
    - `os_uptodate` boolean: Whether the operating system is up to date
    - `os_outdated` integer: Days OS is outdated
    - `os_rolling_release_last_full_update` integer: Timestamp of the last full system update on a rolling-release distro (e.g. pacman -Syu on Arch Linux). Rolling releases are evaluated on update recency + local CVE audit rather than a version number, so os_version is not meaningful (it is typically "rolling").
    - `os_rolling_release_has_security_risks_local_detection` boolean: Whether a local security audit tool (e.g. arch-audit) detected known package vulnerabilities on a rolling-release distro. Basis for the OS up-to-date decision on rolling releases.
    - `os_evaluated_by_policy` boolean: Whether the operating system is evaluated by policy
    - `os_autoupdate` boolean: Whether the operating system auto-updates
    - `os_autoupdate_evaluated_by_policy` boolean: Whether the operating system auto-update is evaluated by policy
    - `android_security_level` string: Android security level
    - `manufacturer` string: Manufacturer of the device
    - `model` string: Model of the device
    - `model_identifier` string: Identifier of the device model
    - `browser_last_used` 'Chrome' | 'Chromium' | 'Firefox' | 'Safari' | 'Edge' | 'Brave' | 'Opera' | 'Vivaldi' | 'IE' | 'Arc': Name of the browser last used
    - `browser_uptodate` boolean: Whether the browser is up to date
    - `browser_evaluated_by_policy` boolean: Whether the browser is evaluated by policy
    - `chrome_version` string: Version of Chrome browser
    - `chrome_uptodate` boolean: Whether Chrome is up to date
    - `chrome_outdated` integer: Days Chrome is outdated
    - `chrome_safebrowsing_enabled` boolean: Whether Chrome Safe Browsing is enabled
    - `chrome_safebrowsing_evaluated_by_policy` boolean: Whether Chrome Safe Browsing is evaluated by policy
    - `chrome_safebrowsing_enhanced` boolean: Whether Chrome Safe Browsing Enhanced is enabled
    - `chrome_safebrowsing_enhanced_evaluated_by_policy` boolean: Whether Chrome Safe Browsing Enhanced is evaluated by policy
    - `chrome_do_not_track` boolean: Whether Chrome Do Not Track is enabled
    - `chrome_do_not_track_evaluated_by_policy` boolean: Whether Chrome Do Not Track is evaluated by policy
    - `chrome_dns_over_https` boolean: Whether Chrome DNS over HTTPS is enabled
    - `chrome_dns_over_https_evaluated_by_policy` boolean: Whether Chrome DNS over HTTPS is evaluated by policy
    - `firefox_version` string: Version of Firefox browser
    - `firefox_uptodate` boolean: Whether Firefox is up to date
    - `firefox_outdated` integer: Days Firefox is outdated
    - `firefox_https_only` boolean: Whether Firefox HTTPS Only mode is enabled
    - `firefox_https_only_evaluated_by_policy` boolean: Whether Firefox HTTPS Only mode is evaluated by policy
    - `firefox_dns_over_https` boolean: Whether Firefox DNS over HTTPS is enabled
    - `firefox_dns_over_https_evaluated_by_policy` boolean: Whether Firefox DNS over HTTPS is evaluated by policy
    - `firefox_enhanced_tracking_protection` boolean: Whether Firefox Enhanced Tracking Protection is enabled
    - `firefox_enhanced_tracking_protection_evaluated_by_policy` boolean: Whether Firefox Enhanced Tracking Protection is evaluated by policy
    - `firefox_enhanced_tracking_protection_strict` boolean: Whether Firefox Enhanced Tracking Protection Strict mode is enabled
    - `firefox_enhanced_tracking_protection_strict_evaluated_by_policy` boolean: Whether Firefox Enhanced Tracking Protection Strict mode is evaluated by policy
    - `edge_version` string: Version of Edge browser
    - `edge_uptodate` boolean: Whether Edge is up to date
    - `edge_outdated` integer: Days Edge is outdated
    - `safari_version` string: Version of Safari browser
    - `safari_uptodate` boolean: Whether Safari is up to date
    - `safari_outdated` integer: Days Safari is outdated
    - `brave_version` string: Version of Brave browser
    - `brave_uptodate` boolean: Whether Brave is up to date
    - `brave_outdated` integer: Days Brave is outdated
    - `arc_version` string: Version of Arc browser
    - `arc_uptodate` boolean: Whether Arc is up to date
    - `arc_outdated` integer: Days Arc is outdated
    - `opera_version` string: Version of Opera browser
    - `opera_uptodate` boolean: Whether Opera is up to date
    - `opera_outdated` integer: Days Opera is outdated
    - `vivaldi_version` string: Version of Vivaldi browser
    - `vivaldi_uptodate` boolean: Whether Vivaldi is up to date
    - `vivaldi_outdated` integer: Days Vivaldi is outdated
    - `diskencryption_supported` boolean: Whether disk encryption is supported
    - `diskencryption_active` boolean: Whether disk encryption is active
    - `diskencryption_evaluated_by_policy` boolean: Whether disk encryption is evaluated by policy
    - `antivirus_enabled` boolean: Whether antivirus is enabled
    - `antivirus_product_name` string: Name of the detected antivirus product
    - `antivirus_installed` boolean: Whether the antivirus product is installed
    - `antivirus_running` boolean: Whether the antivirus product is running
    - `antivirus_uptodate` boolean: Whether the antivirus definitions are up to date
    - `antivirus_inventory_status` 'complete' | 'partial' | 'unavailable': Completeness of the latest native antivirus measurement.
    - `antivirus_products` AntivirusProduct[]
      - `product_id` string, required
      - `product_name` string, required
      - `installed` boolean, nullable
      - `running` boolean, nullable
      - `up_to_date` boolean, nullable
      - `enabled` boolean, nullable: Existing XProtect verdict on macOS only.
    - `antivirus_timestamp` integer: Server timestamp of the antivirus measurement; unrelated device updates do not refresh it.
    - `antivirus_source` 'xfa_agent' | 'browser' | 'chrome_device_trust' | 'edge_device_trust' | 'discovery': Server-assigned source of the antivirus measurement.
    - `antivirus_evaluated_by_policy` boolean: Whether antivirus is evaluated by policy
    - `firewall_enabled` boolean: Whether firewall is enabled
    - `firewall_evaluated_by_policy` boolean: Whether firewall is evaluated by policy
    - `find_my_device_enabled` boolean: Whether Find My Device is enabled
    - `find_my_device_evaluated_by_policy` boolean: Whether Find My Device is evaluated by policy
    - `vanta_client_running` boolean: Whether Vanta client is running
    - `vanta_client_running_evaluated_by_policy` boolean: Whether Vanta client running is evaluated by policy
    - `aikido_safe_chain_supported` boolean: Whether Aikido Safe Chain is supported on this device's OS (cross-platform: mac/linux/windows)
    - `aikido_safe_chain_installed` boolean: Whether Aikido Safe Chain is installed on the device
    - `aikido_safe_chain_active` boolean: Whether Aikido Safe Chain shell-profile integration is active (the wrapper is on PATH and intercepts package-manager calls)
    - `aikido_safe_chain_version` string: Installed version of Aikido Safe Chain (from `safe-chain --version`)
    - `aikido_safe_chain_latest_version` string: Latest known Aikido Safe Chain version (from xfa-versions-service)
    - `aikido_safe_chain_uptodate` boolean: Whether the installed Aikido Safe Chain version matches the latest known version
    - `aikido_safe_chain_evaluated_by_policy` boolean: Whether Aikido Safe Chain is evaluated by policy
    - `aikido_endpoint_supported` boolean: Whether Aikido Endpoint is supported on this device's OS (macOS only today)
    - `aikido_endpoint_installed` boolean: Whether the Aikido Endpoint agent is installed on the device
    - `aikido_endpoint_active` boolean: Whether the Aikido Endpoint system extension is active
    - `aikido_endpoint_version` string: Installed version of Aikido Endpoint (from the bundle's Info.plist)
    - `aikido_endpoint_latest_version` string: Latest known Aikido Endpoint version (from xfa-versions-service)
    - `aikido_endpoint_uptodate` boolean: Whether the installed Aikido Endpoint version matches the latest known version
    - `aikido_endpoint_evaluated_by_policy` boolean: Whether Aikido Endpoint is evaluated by policy
    - `intune_enrolled` boolean: Whether the device is enrolled in Intune
    - `intune_tenant_ids` string[]: List of Intune tenant IDs
    - `intune_evaluated_by_policy` boolean: Whether Intune enrollment is evaluated by policy
    - `sentinelone_installed` boolean: Whether the SentinelOne EDR agent is installed on the device
    - `sentinelone_management_url` string: URL of the SentinelOne management console
    - `sentinelone_site_name` string: Site name in the SentinelOne management console
    - `sentinelone_evaluated_by_policy` boolean: Whether SentinelOne installation is evaluated by policy
    - `time_since_boot_in_days` integer: Time since the device was last booted, in days
    - `microsoft_word_version` string: Version of Microsoft Word
    - `microsoft_word_uptodate` boolean: Whether Microsoft Word is up to date
    - `microsoft_word_evaluated_by_policy` boolean: Whether Microsoft Word is evaluated by policy
    - `microsoft_excel_version` string: Version of Microsoft Excel
    - `microsoft_excel_uptodate` boolean: Whether Microsoft Excel is up to date
    - `microsoft_excel_evaluated_by_policy` boolean: Whether Microsoft Excel is evaluated by policy
    - `microsoft_powerpoint_version` string: Version of Microsoft PowerPoint
    - `microsoft_powerpoint_uptodate` boolean: Whether Microsoft PowerPoint is up to date
    - `microsoft_powerpoint_evaluated_by_policy` boolean: Whether Microsoft PowerPoint is evaluated by policy
    - `microsoft_outlook_version` string: Version of Microsoft Outlook
    - `microsoft_outlook_uptodate` boolean: Whether Microsoft Outlook is up to date
    - `microsoft_outlook_evaluated_by_policy` boolean: Whether Microsoft Outlook is evaluated by policy
    - `microsoft_teams_version` string: Version of Microsoft Teams
    - `microsoft_teams_uptodate` boolean: Whether Microsoft Teams is up to date
    - `microsoft_teams_evaluated_by_policy` boolean: Whether Microsoft Teams is evaluated by policy
    - `slack_version` string: Version of Slack
    - `slack_uptodate` boolean: Whether Slack is up to date
    - `slack_evaluated_by_policy` boolean: Whether Slack is evaluated by policy
    - `zoom_version` string: Version of Zoom
    - `zoom_uptodate` boolean: Whether Zoom is up to date
    - `zoom_evaluated_by_policy` boolean: Whether Zoom is evaluated by policy
    - `skype_version` string: Version of Skype
    - `skype_uptodate` boolean: Whether Skype is up to date
    - `skype_evaluated_by_policy` boolean: Whether Skype is evaluated by policy
    - `adobe_acrobat_reader_version` string: Version of Adobe Acrobat Reader
    - `adobe_acrobat_reader_uptodate` boolean: Whether Adobe Acrobat Reader is up to date
    - `adobe_acrobat_reader_evaluated_by_policy` boolean: Whether Adobe Acrobat Reader is evaluated by policy
    - `adobe_acrobat_standard_or_pro_version` string: Version of Adobe Acrobat Standard or Pro
    - `adobe_acrobat_standard_or_pro_uptodate` boolean: Whether Adobe Acrobat Standard or Pro is up to date
    - `adobe_acrobat_standard_or_pro_evaluated_by_policy` boolean: Whether Adobe Acrobat Standard or Pro is evaluated by policy
    - `foxit_reader_version` string: Version of Foxit Reader
    - `foxit_reader_uptodate` boolean: Whether Foxit Reader is up to date
    - `foxit_reader_evaluated_by_policy` boolean: Whether Foxit Reader is evaluated by policy
    - `sumatra_pdf_version` string: Version of Sumatra PDF
    - `sumatra_pdf_uptodate` boolean: Whether Sumatra PDF is up to date
    - `sumatra_pdf_evaluated_by_policy` boolean: Whether Sumatra PDF is evaluated by policy
    - `nitro_pdf_reader_version` string: Version of Nitro PDF Reader
    - `nitro_pdf_reader_uptodate` boolean: Whether Nitro PDF Reader is up to date
    - `nitro_pdf_reader_evaluated_by_policy` boolean: Whether Nitro PDF Reader is evaluated by policy
    - `jailbroken` boolean: Whether the device is jailbroken
    - `jailbroken_evaluated_by_policy` boolean: Whether the device being jailbroken is evaluated by policy
    - `rooted` boolean: Whether the device is rooted
    - `rooted_evaluated_by_policy` boolean: Whether the device being rooted is evaluated by policy
    - `developer_mode` boolean: Whether developer mode is enabled
    - `developer_mode_evaluated_by_policy` boolean: Whether developer mode is evaluated by policy
    - `secure_boot_enabled` boolean: Whether secure boot is enabled
    - `secure_boot_enabled_evaluated_by_policy` boolean: Whether secure boot is evaluated by policy
    - `secure_boot_status` 'OK' | 'WARNING' | 'BLOCKING' | 'MISSING': Security status indicating compliance level
    - `remote_login_enabled` boolean: Whether remote login is enabled
    - `remote_login_enabled_evaluated_by_policy` boolean: Whether remote login is evaluated by policy
    - `remote_management_enabled` boolean: Whether remote management is enabled
    - `remote_management_enabled_evaluated_by_policy` boolean: Whether remote management is evaluated by policy
    - `screen_sharing_enabled` boolean: Whether screen sharing is enabled
    - `screen_sharing_enabled_evaluated_by_policy` boolean: Whether screen sharing is evaluated by policy
    - `remote_scripting_enabled` boolean: Whether remote scripting is enabled
    - `remote_scripting_enabled_evaluated_by_policy` boolean: Whether remote scripting is evaluated by policy
    - `unattended_remote_access_enabled` boolean: Whether unattended remote access is enabled
    - `unattended_remote_access_enabled_evaluated_by_policy` boolean: Whether unattended remote access is evaluated by policy
    - `integrity_protection_enabled` boolean: Whether integrity protection is enabled
    - `integrity_protection_enabled_evaluated_by_policy` boolean: Whether integrity protection is evaluated by policy
    - `integrity_protection_status` 'supported' | 'active' | 'inactive' | 'unknown': Integrity protection status
    - `dns_servers_evaluated_by_policy` boolean: Whether DNS servers are evaluated by policy
    - `dns_servers_compliant` boolean: Whether DNS servers are compliant
    - `dns_validation_mode` 'exact_match' | 'exact_with_extra' | 'contains': DNS validation mode
    - `dns_status` 'OK' | 'WARNING' | 'BLOCKING' | 'MISSING': Security status indicating compliance level
    - `has_recently_rebooted` boolean: Whether device has recently rebooted
    - `has_recently_rebooted_evaluated_by_policy` boolean: Whether recent reboot is evaluated by policy
    - `windows_recall` object: Windows Recall information
      - `active` boolean: Whether Windows Recall is active
      - `available` boolean: Whether Windows Recall is available
    - `windows_recall_evaluated_by_policy` boolean: Whether Windows Recall is evaluated by policy
    - `xfa_version_evaluated_by_policy` boolean: Whether XFA version is evaluated by policy
    - `xfa_up_to_date` boolean: Whether XFA is up to date
    - `xfa_outdated` integer: Days XFA is outdated
    - `passwordmanager` PasswordManager
      - `onepassword` boolean: Whether 1Password is used
      - `lastpass` boolean: Whether LastPass is used
      - `dashlane` boolean: Whether Dashlane is used
      - `bitwarden` boolean: Whether Bitwarden is used
      - `keepass` boolean: Whether KeePass is used
      - `nordpass` boolean: Whether NordPass is used
      - `protonpass` boolean: Whether ProtonPass is used
      - `icloud_passwords` boolean: Whether iCloud Passwords is used
      - `dropbox_passwords` boolean: Whether Dropbox Passwords is used
      - `passbolt` boolean: Whether Passbolt is used
      - `enpass` boolean: Whether Enpass is used
      - `avast_passwords` boolean: Whether Avast Passwords is used
      - `avira_passwords` boolean: Whether Avira Passwords is used
    - `passwordmanager_evaluated_by_policy` boolean: Whether password manager is evaluated by policy
    - `nativeclient_installed` boolean: Whether native client is installed
    - `nativeclient_evaluated_by_policy` boolean: Whether native client installation is evaluated by policy
    - `authentication_active` boolean: Whether authentication is active
    - `authentication_evaluated_by_policy` boolean: Whether authentication is evaluated by policy
    - `biometrics` string: Biometrics information
    - `biometrics_evaluated_by_policy` boolean: Whether biometrics is evaluated by policy
    - `unsigned_applications` object: Aggregate-only posture for the unsigned-applications check (BETA). Per-bundle data NEVER leaves the device — only category counts.
      - `supported` boolean, required: Whether the OS supports the unsigned-applications check (false on Linux/iOS/Android in Phase 2)
      - `pending` boolean: Whether the on-device scan is still in progress (true while the first pass runs after install or recheck)
      - `categories` object: Device-local count per trust-category. Keys are constrained to the documented allowlist.
    - `unsigned_applications_evaluated_by_policy` boolean: Whether unsigned applications are evaluated by policy
    - `install_protection` object: Aggregate-only posture for the install-protection check (BETA). macOS Gatekeeper + Windows SmartScreen/Defender PUA.
      - `supported` boolean, required: Whether the OS supports an install-protection check
      - `gatekeeper_enabled` boolean: macOS only — whether Gatekeeper (`spctl --status`) is enabled
      - `gatekeeper_policy` string: macOS only — Gatekeeper assessment policy (`developer_id`, `app_store`, etc.)
      - `smartscreen_explorer` 'Off' | 'Prompt' | 'Block' | 'unknown': Windows only — Explorer SmartScreen mode
      - `defender_pua` boolean: Windows only — whether Defender PUA protection is enabled
    - `install_protection_evaluated_by_policy` boolean: Whether install protection is evaluated by policy
    - `blocklisted_applications` object: Aggregate-only posture for the blocklisted-applications check (BETA). Wire field uses inclusive 'blocklisted' naming even though the desktop module is 'blacklistedapplications'. Per-bundle data NEVER leaves the device — only category counts.
      - `supported` boolean, required: Whether the OS supports the blocklisted-applications check
      - `pending` boolean: Whether the on-device scan is still in progress
      - `categories` object: Device-local count per blocklist category. Keys are constrained to the documented allowlist.
    - `blocklisted_applications_evaluated_by_policy` boolean: Whether blocklisted applications are evaluated by policy
    - `managed` boolean: Whether the device is managed
    - `xfa_version` string: XFA version
    - `connect` boolean: Whether the device is connected
    - `merged_device_ids` string[], required: List of merged device IDs
    - `merged_into_device_id` string: ID of the device into which this device is merged
    - `skip` boolean: Whether the device is skipped
    - `unsupported` boolean: Whether the device is unsupported
    - `discovered` boolean: Whether the device is discovered
    - `google_mobile_device_ids` string[], required: List of Google mobile device IDs
    - `google_cloud_identity_device_ids` string[], required: List of Google Cloud Identity device IDs
    - `microsoft_device_ids` string[], required: List of Microsoft device IDs
    - `okta_discovered` boolean: Whether the device is discovered by Okta
    - `details_hidden` boolean: Set on a discovered device whose details the organization's plan does not include (hide_discovered_device_details). The record carries identity only (no check results, decisions or CVEs), plus issues_count and risk. Opening the device returns 403 discovered_device_details_not_in_plan.
    - `issues_count` integer: Number of policy checks failing on the device (warn or block). Only set when details_hidden is true.
    - `risk` 'safe' | 'unsafe' | 'unknown' | 'safe_with_unknowns': Overall risk of the device against the policy. Only set when details_hidden is true.
    - `has_unknown_checks_required_by_policy` boolean: Whether the device has unknown checks required by policy
    - `has_unsafe_checks_evaluated_by_policy` boolean: Whether the device has unsafe checks evaluated by policy
    - `has_not_shared_checks_required_by_policy` boolean: Whether the person does not share a check the policy warns or blocks on (XFA-3686). Such a device is not compliant. Absent when false or not yet evaluated.
    - `timestamp_last_notified` string, date-time: Timestamp when the device was last notified
    - `os_cves` CVE[], required: List of OS CVEs
      - `categories` string[]
      - `cisaActionDue` string
      - `cisaExploitAdd` string
      - `cisaRequiredAction` string
      - `cisaVulnerabilityName` string
      - `configurations` object[]
        - `negate` boolean
        - `nodes` object[]
          - `cpeMatch` object[]
            - `criteria` string
            - `matchCriteriaId` string
            - `versionEndExcluding` string
            - `versionEndIncluding` string
            - `versionStartExcluding` string
            - `versionStartIncluding` string
            - `vulnerable` boolean
          - `negate` boolean
          - `operator` string
        - `operator` string
      - `cveTags` object[]
        - `sourceIdentifier` string
        - `tags` string[]
      - `descriptions` object[]
        - `lang` string
        - `value` string
      - `evaluatorComment` string
      - `evaluatorImpact` string
      - `evaluatorSolution` string
      - `id` string
      - `kev` object
        - `cveID` string
        - `cwes` string[]
        - `dateAdded` string
        - `dueDate` string
        - `knownRansomwareCampaignUse` string
        - `notes` string
        - `product` string
        - `requiredAction` string
        - `shortDescription` string
        - `vendorProject` string
        - `vulnerabilityName` string
      - `lastModified` string
      - `metrics` object
        - `cvssMetricV2` object[]
          - `acInsufInfo` boolean
          - `baseSeverity` string
          - `cvssData` object
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `source` string
          - `type` string
          - `userInteractionRequired` boolean
        - `cvssMetricV30` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV31` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV40` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `exploitabilityScore` number, float
            - `impactScore` number, float
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
          - `source` string
          - `type` string
      - `published` string
      - `references` object[]
        - `source` string
        - `tags` string[]
        - `url` string
      - `software_name` string
      - `sourceIdentifier` string
      - `tag` string
      - `vendorComments` object[]
        - `comment` string
        - `lastModified` string
        - `organization` string
      - `vulnStatus` string
      - `weaknesses` object[]
        - `description` object[]
          - `lang` string
          - `value` string
        - `source` string
        - `type` string
    - `browser_cves` CVE[], required: List of browser CVEs
      - `categories` string[]
      - `cisaActionDue` string
      - `cisaExploitAdd` string
      - `cisaRequiredAction` string
      - `cisaVulnerabilityName` string
      - `configurations` object[]
        - `negate` boolean
        - `nodes` object[]
          - `cpeMatch` object[]
            - `criteria` string
            - `matchCriteriaId` string
            - `versionEndExcluding` string
            - `versionEndIncluding` string
            - `versionStartExcluding` string
            - `versionStartIncluding` string
            - `vulnerable` boolean
          - `negate` boolean
          - `operator` string
        - `operator` string
      - `cveTags` object[]
        - `sourceIdentifier` string
        - `tags` string[]
      - `descriptions` object[]
        - `lang` string
        - `value` string
      - `evaluatorComment` string
      - `evaluatorImpact` string
      - `evaluatorSolution` string
      - `id` string
      - `kev` object
        - `cveID` string
        - `cwes` string[]
        - `dateAdded` string
        - `dueDate` string
        - `knownRansomwareCampaignUse` string
        - `notes` string
        - `product` string
        - `requiredAction` string
        - `shortDescription` string
        - `vendorProject` string
        - `vulnerabilityName` string
      - `lastModified` string
      - `metrics` object
        - `cvssMetricV2` object[]
          - `acInsufInfo` boolean
          - `baseSeverity` string
          - `cvssData` object
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `source` string
          - `type` string
          - `userInteractionRequired` boolean
        - `cvssMetricV30` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV31` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV40` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `exploitabilityScore` number, float
            - `impactScore` number, float
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
          - `source` string
          - `type` string
      - `published` string
      - `references` object[]
        - `source` string
        - `tags` string[]
        - `url` string
      - `software_name` string
      - `sourceIdentifier` string
      - `tag` string
      - `vendorComments` object[]
        - `comment` string
        - `lastModified` string
        - `organization` string
      - `vulnStatus` string
      - `weaknesses` object[]
        - `description` object[]
          - `lang` string
          - `value` string
        - `source` string
        - `type` string
    - `chrome_cves` CVE[], required: List of Chrome CVEs
      - `categories` string[]
      - `cisaActionDue` string
      - `cisaExploitAdd` string
      - `cisaRequiredAction` string
      - `cisaVulnerabilityName` string
      - `configurations` object[]
        - `negate` boolean
        - `nodes` object[]
          - `cpeMatch` object[]
            - `criteria` string
            - `matchCriteriaId` string
            - `versionEndExcluding` string
            - `versionEndIncluding` string
            - `versionStartExcluding` string
            - `versionStartIncluding` string
            - `vulnerable` boolean
          - `negate` boolean
          - `operator` string
        - `operator` string
      - `cveTags` object[]
        - `sourceIdentifier` string
        - `tags` string[]
      - `descriptions` object[]
        - `lang` string
        - `value` string
      - `evaluatorComment` string
      - `evaluatorImpact` string
      - `evaluatorSolution` string
      - `id` string
      - `kev` object
        - `cveID` string
        - `cwes` string[]
        - `dateAdded` string
        - `dueDate` string
        - `knownRansomwareCampaignUse` string
        - `notes` string
        - `product` string
        - `requiredAction` string
        - `shortDescription` string
        - `vendorProject` string
        - `vulnerabilityName` string
      - `lastModified` string
      - `metrics` object
        - `cvssMetricV2` object[]
          - `acInsufInfo` boolean
          - `baseSeverity` string
          - `cvssData` object
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `source` string
          - `type` string
          - `userInteractionRequired` boolean
        - `cvssMetricV30` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV31` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV40` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `exploitabilityScore` number, float
            - `impactScore` number, float
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
          - `source` string
          - `type` string
      - `published` string
      - `references` object[]
        - `source` string
        - `tags` string[]
        - `url` string
      - `software_name` string
      - `sourceIdentifier` string
      - `tag` string
      - `vendorComments` object[]
        - `comment` string
        - `lastModified` string
        - `organization` string
      - `vulnStatus` string
      - `weaknesses` object[]
        - `description` object[]
          - `lang` string
          - `value` string
        - `source` string
        - `type` string
    - `firefox_cves` CVE[], required: List of Firefox CVEs
      - `categories` string[]
      - `cisaActionDue` string
      - `cisaExploitAdd` string
      - `cisaRequiredAction` string
      - `cisaVulnerabilityName` string
      - `configurations` object[]
        - `negate` boolean
        - `nodes` object[]
          - `cpeMatch` object[]
            - `criteria` string
            - `matchCriteriaId` string
            - `versionEndExcluding` string
            - `versionEndIncluding` string
            - `versionStartExcluding` string
            - `versionStartIncluding` string
            - `vulnerable` boolean
          - `negate` boolean
          - `operator` string
        - `operator` string
      - `cveTags` object[]
        - `sourceIdentifier` string
        - `tags` string[]
      - `descriptions` object[]
        - `lang` string
        - `value` string
      - `evaluatorComment` string
      - `evaluatorImpact` string
      - `evaluatorSolution` string
      - `id` string
      - `kev` object
        - `cveID` string
        - `cwes` string[]
        - `dateAdded` string
        - `dueDate` string
        - `knownRansomwareCampaignUse` string
        - `notes` string
        - `product` string
        - `requiredAction` string
        - `shortDescription` string
        - `vendorProject` string
        - `vulnerabilityName` string
      - `lastModified` string
      - `metrics` object
        - `cvssMetricV2` object[]
          - `acInsufInfo` boolean
          - `baseSeverity` string
          - `cvssData` object
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `source` string
          - `type` string
          - `userInteractionRequired` boolean
        - `cvssMetricV30` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV31` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV40` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `exploitabilityScore` number, float
            - `impactScore` number, float
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
          - `source` string
          - `type` string
      - `published` string
      - `references` object[]
        - `source` string
        - `tags` string[]
        - `url` string
      - `software_name` string
      - `sourceIdentifier` string
      - `tag` string
      - `vendorComments` object[]
        - `comment` string
        - `lastModified` string
        - `organization` string
      - `vulnStatus` string
      - `weaknesses` object[]
        - `description` object[]
          - `lang` string
          - `value` string
        - `source` string
        - `type` string
    - `edge_cves` CVE[], required: List of Edge CVEs
      - `categories` string[]
      - `cisaActionDue` string
      - `cisaExploitAdd` string
      - `cisaRequiredAction` string
      - `cisaVulnerabilityName` string
      - `configurations` object[]
        - `negate` boolean
        - `nodes` object[]
          - `cpeMatch` object[]
            - `criteria` string
            - `matchCriteriaId` string
            - `versionEndExcluding` string
            - `versionEndIncluding` string
            - `versionStartExcluding` string
            - `versionStartIncluding` string
            - `vulnerable` boolean
          - `negate` boolean
          - `operator` string
        - `operator` string
      - `cveTags` object[]
        - `sourceIdentifier` string
        - `tags` string[]
      - `descriptions` object[]
        - `lang` string
        - `value` string
      - `evaluatorComment` string
      - `evaluatorImpact` string
      - `evaluatorSolution` string
      - `id` string
      - `kev` object
        - `cveID` string
        - `cwes` string[]
        - `dateAdded` string
        - `dueDate` string
        - `knownRansomwareCampaignUse` string
        - `notes` string
        - `product` string
        - `requiredAction` string
        - `shortDescription` string
        - `vendorProject` string
        - `vulnerabilityName` string
      - `lastModified` string
      - `metrics` object
        - `cvssMetricV2` object[]
          - `acInsufInfo` boolean
          - `baseSeverity` string
          - `cvssData` object
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `source` string
          - `type` string
          - `userInteractionRequired` boolean
        - `cvssMetricV30` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV31` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV40` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `exploitabilityScore` number, float
            - `impactScore` number, float
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
          - `source` string
          - `type` string
      - `published` string
      - `references` object[]
        - `source` string
        - `tags` string[]
        - `url` string
      - `software_name` string
      - `sourceIdentifier` string
      - `tag` string
      - `vendorComments` object[]
        - `comment` string
        - `lastModified` string
        - `organization` string
      - `vulnStatus` string
      - `weaknesses` object[]
        - `description` object[]
          - `lang` string
          - `value` string
        - `source` string
        - `type` string
    - `safari_cves` CVE[], required: List of Safari CVEs
      - `categories` string[]
      - `cisaActionDue` string
      - `cisaExploitAdd` string
      - `cisaRequiredAction` string
      - `cisaVulnerabilityName` string
      - `configurations` object[]
        - `negate` boolean
        - `nodes` object[]
          - `cpeMatch` object[]
            - `criteria` string
            - `matchCriteriaId` string
            - `versionEndExcluding` string
            - `versionEndIncluding` string
            - `versionStartExcluding` string
            - `versionStartIncluding` string
            - `vulnerable` boolean
          - `negate` boolean
          - `operator` string
        - `operator` string
      - `cveTags` object[]
        - `sourceIdentifier` string
        - `tags` string[]
      - `descriptions` object[]
        - `lang` string
        - `value` string
      - `evaluatorComment` string
      - `evaluatorImpact` string
      - `evaluatorSolution` string
      - `id` string
      - `kev` object
        - `cveID` string
        - `cwes` string[]
        - `dateAdded` string
        - `dueDate` string
        - `knownRansomwareCampaignUse` string
        - `notes` string
        - `product` string
        - `requiredAction` string
        - `shortDescription` string
        - `vendorProject` string
        - `vulnerabilityName` string
      - `lastModified` string
      - `metrics` object
        - `cvssMetricV2` object[]
          - `acInsufInfo` boolean
          - `baseSeverity` string
          - `cvssData` object
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `source` string
          - `type` string
          - `userInteractionRequired` boolean
        - `cvssMetricV30` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV31` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV40` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `exploitabilityScore` number, float
            - `impactScore` number, float
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
          - `source` string
          - `type` string
      - `published` string
      - `references` object[]
        - `source` string
        - `tags` string[]
        - `url` string
      - `software_name` string
      - `sourceIdentifier` string
      - `tag` string
      - `vendorComments` object[]
        - `comment` string
        - `lastModified` string
        - `organization` string
      - `vulnStatus` string
      - `weaknesses` object[]
        - `description` object[]
          - `lang` string
          - `value` string
        - `source` string
        - `type` string
    - `opera_cves` CVE[], required: List of Opera CVEs
      - `categories` string[]
      - `cisaActionDue` string
      - `cisaExploitAdd` string
      - `cisaRequiredAction` string
      - `cisaVulnerabilityName` string
      - `configurations` object[]
        - `negate` boolean
        - `nodes` object[]
          - `cpeMatch` object[]
            - `criteria` string
            - `matchCriteriaId` string
            - `versionEndExcluding` string
            - `versionEndIncluding` string
            - `versionStartExcluding` string
            - `versionStartIncluding` string
            - `vulnerable` boolean
          - `negate` boolean
          - `operator` string
        - `operator` string
      - `cveTags` object[]
        - `sourceIdentifier` string
        - `tags` string[]
      - `descriptions` object[]
        - `lang` string
        - `value` string
      - `evaluatorComment` string
      - `evaluatorImpact` string
      - `evaluatorSolution` string
      - `id` string
      - `kev` object
        - `cveID` string
        - `cwes` string[]
        - `dateAdded` string
        - `dueDate` string
        - `knownRansomwareCampaignUse` string
        - `notes` string
        - `product` string
        - `requiredAction` string
        - `shortDescription` string
        - `vendorProject` string
        - `vulnerabilityName` string
      - `lastModified` string
      - `metrics` object
        - `cvssMetricV2` object[]
          - `acInsufInfo` boolean
          - `baseSeverity` string
          - `cvssData` object
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `source` string
          - `type` string
          - `userInteractionRequired` boolean
        - `cvssMetricV30` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV31` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV40` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `exploitabilityScore` number, float
            - `impactScore` number, float
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
          - `source` string
          - `type` string
      - `published` string
      - `references` object[]
        - `source` string
        - `tags` string[]
        - `url` string
      - `software_name` string
      - `sourceIdentifier` string
      - `tag` string
      - `vendorComments` object[]
        - `comment` string
        - `lastModified` string
        - `organization` string
      - `vulnStatus` string
      - `weaknesses` object[]
        - `description` object[]
          - `lang` string
          - `value` string
        - `source` string
        - `type` string
    - `vivaldi_cves` CVE[], required: List of Vivaldi CVEs
      - `categories` string[]
      - `cisaActionDue` string
      - `cisaExploitAdd` string
      - `cisaRequiredAction` string
      - `cisaVulnerabilityName` string
      - `configurations` object[]
        - `negate` boolean
        - `nodes` object[]
          - `cpeMatch` object[]
            - `criteria` string
            - `matchCriteriaId` string
            - `versionEndExcluding` string
            - `versionEndIncluding` string
            - `versionStartExcluding` string
            - `versionStartIncluding` string
            - `vulnerable` boolean
          - `negate` boolean
          - `operator` string
        - `operator` string
      - `cveTags` object[]
        - `sourceIdentifier` string
        - `tags` string[]
      - `descriptions` object[]
        - `lang` string
        - `value` string
      - `evaluatorComment` string
      - `evaluatorImpact` string
      - `evaluatorSolution` string
      - `id` string
      - `kev` object
        - `cveID` string
        - `cwes` string[]
        - `dateAdded` string
        - `dueDate` string
        - `knownRansomwareCampaignUse` string
        - `notes` string
        - `product` string
        - `requiredAction` string
        - `shortDescription` string
        - `vendorProject` string
        - `vulnerabilityName` string
      - `lastModified` string
      - `metrics` object
        - `cvssMetricV2` object[]
          - `acInsufInfo` boolean
          - `baseSeverity` string
          - `cvssData` object
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `source` string
          - `type` string
          - `userInteractionRequired` boolean
        - `cvssMetricV30` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV31` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV40` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `exploitabilityScore` number, float
            - `impactScore` number, float
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
          - `source` string
          - `type` string
      - `published` string
      - `references` object[]
        - `source` string
        - `tags` string[]
        - `url` string
      - `software_name` string
      - `sourceIdentifier` string
      - `tag` string
      - `vendorComments` object[]
        - `comment` string
        - `lastModified` string
        - `organization` string
      - `vulnStatus` string
      - `weaknesses` object[]
        - `description` object[]
          - `lang` string
          - `value` string
        - `source` string
        - `type` string
    - `brave_cves` CVE[], required: List of Brave CVEs
      - `categories` string[]
      - `cisaActionDue` string
      - `cisaExploitAdd` string
      - `cisaRequiredAction` string
      - `cisaVulnerabilityName` string
      - `configurations` object[]
        - `negate` boolean
        - `nodes` object[]
          - `cpeMatch` object[]
            - `criteria` string
            - `matchCriteriaId` string
            - `versionEndExcluding` string
            - `versionEndIncluding` string
            - `versionStartExcluding` string
            - `versionStartIncluding` string
            - `vulnerable` boolean
          - `negate` boolean
          - `operator` string
        - `operator` string
      - `cveTags` object[]
        - `sourceIdentifier` string
        - `tags` string[]
      - `descriptions` object[]
        - `lang` string
        - `value` string
      - `evaluatorComment` string
      - `evaluatorImpact` string
      - `evaluatorSolution` string
      - `id` string
      - `kev` object
        - `cveID` string
        - `cwes` string[]
        - `dateAdded` string
        - `dueDate` string
        - `knownRansomwareCampaignUse` string
        - `notes` string
        - `product` string
        - `requiredAction` string
        - `shortDescription` string
        - `vendorProject` string
        - `vulnerabilityName` string
      - `lastModified` string
      - `metrics` object
        - `cvssMetricV2` object[]
          - `acInsufInfo` boolean
          - `baseSeverity` string
          - `cvssData` object
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `source` string
          - `type` string
          - `userInteractionRequired` boolean
        - `cvssMetricV30` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV31` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV40` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `exploitabilityScore` number, float
            - `impactScore` number, float
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
          - `source` string
          - `type` string
      - `published` string
      - `references` object[]
        - `source` string
        - `tags` string[]
        - `url` string
      - `software_name` string
      - `sourceIdentifier` string
      - `tag` string
      - `vendorComments` object[]
        - `comment` string
        - `lastModified` string
        - `organization` string
      - `vulnStatus` string
      - `weaknesses` object[]
        - `description` object[]
          - `lang` string
          - `value` string
        - `source` string
        - `type` string
    - `arc_cves` CVE[], required: List of Arc CVEs
      - `categories` string[]
      - `cisaActionDue` string
      - `cisaExploitAdd` string
      - `cisaRequiredAction` string
      - `cisaVulnerabilityName` string
      - `configurations` object[]
        - `negate` boolean
        - `nodes` object[]
          - `cpeMatch` object[]
            - `criteria` string
            - `matchCriteriaId` string
            - `versionEndExcluding` string
            - `versionEndIncluding` string
            - `versionStartExcluding` string
            - `versionStartIncluding` string
            - `vulnerable` boolean
          - `negate` boolean
          - `operator` string
        - `operator` string
      - `cveTags` object[]
        - `sourceIdentifier` string
        - `tags` string[]
      - `descriptions` object[]
        - `lang` string
        - `value` string
      - `evaluatorComment` string
      - `evaluatorImpact` string
      - `evaluatorSolution` string
      - `id` string
      - `kev` object
        - `cveID` string
        - `cwes` string[]
        - `dateAdded` string
        - `dueDate` string
        - `knownRansomwareCampaignUse` string
        - `notes` string
        - `product` string
        - `requiredAction` string
        - `shortDescription` string
        - `vendorProject` string
        - `vulnerabilityName` string
      - `lastModified` string
      - `metrics` object
        - `cvssMetricV2` object[]
          - `acInsufInfo` boolean
          - `baseSeverity` string
          - `cvssData` object
            - `accessComplexity` string
            - `accessVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `obtainAllPrivilege` boolean
          - `obtainOtherPrivilege` boolean
          - `obtainUserPrivilege` boolean
          - `source` string
          - `type` string
          - `userInteractionRequired` boolean
        - `cvssMetricV30` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV31` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `authentication` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `integrityImpact` string
            - `vectorString` string
          - `exploitabilityScore` number, float
          - `impactScore` number, float
          - `source` string
          - `type` string
        - `cvssMetricV40` object[]
          - `cvssData` object
            - `accessComplexity` string
            - `attackVector` string
            - `availabilityImpact` string
            - `baseScore` number, float
            - `confidentialityImpact` string
            - `exploitabilityScore` number, float
            - `impactScore` number, float
            - `integrityImpact` string
            - `privilegesRequired` string
            - `scope` string
            - `userInteraction` string
            - `vectorString` string
          - `source` string
          - `type` string
      - `published` string
      - `references` object[]
        - `source` string
        - `tags` string[]
        - `url` string
      - `software_name` string
      - `sourceIdentifier` string
      - `tag` string
      - `vendorComments` object[]
        - `comment` string
        - `lastModified` string
        - `organization` string
      - `vulnStatus` string
      - `weaknesses` object[]
        - `description` object[]
          - `lang` string
          - `value` string
        - `source` string
        - `type` string
    - `email` string
    - `note` string: Note added to the device/shadow
    - `tags` string[]: Tags associated with the device/shadow
    - `snoozed_until` integer: Absolute timestamp when the device stops being snoozed
    - `snoozed_at` integer: Timestamp when snoozing started
    - `snoozed_by` string: Email address of the admin who snoozed the device
    - `snooze_reason` string: Optional reason for the snooze
    - `snooze_mfa` boolean: Whether MFA prompts are also snoozed

---

[API](https://skmtc.dev/xfa/apis/xfa-api.md) · [All operations](https://skmtc.dev/xfa/apis/xfa-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xfa/apis/xfa-api/revisions/1a1be0e8972b?raw)