Vulnerabilities

Search vulnerabilities

Semantic search across all active vulnerabilities in an organization to find security issues that match a natural-language query. Useful when you know what kind of vulnerability you're looking for (e.g. "SQL injection in API endpoints", "hardcoded credentials", "missing authentication checks") but don't know which repository it's in. Returns ranked results from the latest completed scan of each repository, with similarity scores. Use the id from results to fetch full details with issues.get, including remediation and patch suggestion data when a patch exists.

post/api/v2/vulnerabilities/search

Request

  • Base URL
    https://zeropath.com
  • Auth
    API key in header X-ZeroPath-API-Token-Id and API key in header X-ZeroPath-API-Token-Secret

Request body

organizationIdstring

Organization to search within. Limits results to repositories the caller can access in this org.

querystring required

Natural-language search query matched against vulnerability descriptions using semantic similarity (e.g. "SQL injection in user input", "authentication bypass", "insecure deserialization").

limitinteger

Maximum number of results to return. Defaults to 10.

Response

Search results

idstring required

Unique ID of the vulnerability.

repositoryIdstring required

ID of the repository containing this vulnerability.

repositoryNamestring required

Display name of the repository.

titlestring required

Generated title summarizing the vulnerability.

descriptionstring required

Generated description of the vulnerability and its impact.

vulnClassstring required

Vulnerability classification (e.g. "SQL Injection", "Cross-Site Scripting", "Path Traversal").

severitynumber required

Severity score (higher is more severe).

affectedFilestring required

File path where the vulnerability was detected.

startLineinteger required

Start line number of the vulnerable code.

endLineinteger required

End line number of the vulnerable code.

scorenumber required

Semantic similarity score between 0 and 1. Higher means a closer match to the query.

Changes

No recorded changes to this operation across all 1 revision of this API.