---
title: "Get SCA vulnerability"
method: POST
path: "/api/v1/sca/vulnerabilities/get"
tags: ["SCA"]
---

# Get SCA vulnerability

`POST /api/v1/sca/vulnerabilities/get`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v1/sca/vulnerabilities/get`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

## Request body

- GetScaVulnerabilityInput
  - `id` string, required
  - `organizationId` string

## Response `200`

Successful response

- ScaVulnerability
  - `id` string, required
  - `package` object, required
    - `id` string
    - `name` string
    - `version` string, nullable
    - `ecosystem` string
    - `manifestPath` string, nullable
    - `manifestStartLine` integer, nullable
    - `manifestEndLine` integer, nullable
    - `manifestStartColumn` integer, nullable
    - `manifestEndColumn` integer, nullable
  - `metadata` object, required
    - `id` string
    - `packageIdentifier` string
    - `aliases` string[]
    - `references` string[]
    - `summary` string
    - `description` string
    - `severityScore` number, nullable
    - `severity` 'critical' | 'high' | 'medium' | 'low' | 'info' | 'null', nullable
    - `isKnownExploited` boolean, nullable: In the CISA Known Exploited Vulnerabilities catalog (exploited in the wild).
    - `kevDateAdded` string, date-time, nullable: Date the CVE was added to the CISA KEV catalog.
    - `kevKnownRansomware` boolean, nullable: Whether the KEV entry is linked to known ransomware campaigns.
    - `epssScore` number, nullable: FIRST EPSS probability of exploitation in the next 30 days (0..1).
    - `epssPercentile` number, nullable: EPSS percentile rank among scored CVEs (0..1).
  - `repositoryId` string, required
  - `branch` string, required
  - `commitSha` string, required
  - `codeScanVulnerabilityId` string, nullable: ID of the related CodeScanVulnerability issue
  - `count` integer: Number of occurrences in this group
  - `items` ScaVulnerability[]: Representative items in this group

## Other responses

- `400`: Bad Request
- `401`: Unauthorized

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api-2.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api-2/revisions/ea6ae4b68cd3?raw)