Get vulnerability details

GET

vulnerabilities

{vulnerabilityId}

Error

A valid request URL is required to generate request examples

{
  "id": "<string>",
  "title": "<string>",
  "description": "<string>",
  "created_at": "2023-11-07T05:31:56Z",
  "status": "open",
  "severity": "critical",
  "scan_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "pr_review_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "cve": "<string>",
  "cvss": 123,
  "potential_risk_saving": 123,
  "risk_saving_description": "<string>",
  "impact": "<string>",
  "endpoint": "<string>",
  "method": "<string>",
  "target": "<string>",
  "technical_analysis": "<string>",
  "poc_description": "<string>",
  "poc_script_code": "<string>",
  "code_diff": "<string>",
  "code_file": "<string>",
  "code_before": "<string>",
  "code_after": "<string>",
  "cwe": [
    "<string>"
  ],
  "code_locations": [
    {
      "file": "<string>",
      "start_line": 123,
      "end_line": 123,
      "snippet": "<string>",
      "label": "<string>",
      "fix_before": "<string>",
      "fix_after": "<string>"
    }
  ],
  "remediation_steps": "<string>",
  "fix_pr_body": "<string>",
  "evidence": "<string>",
  "assumptions": "<string>",
  "fix_effort": "trivial",
  "cvss_breakdown": {
    "attack_vector": "<string>",
    "attack_complexity": "<string>",
    "privileges_required": "<string>",
    "user_interaction": "<string>",
    "scope": "<string>",
    "confidentiality": "<string>",
    "integrity": "<string>",
    "availability": "<string>"
  },
  "status_changed_at": "2023-11-07T05:31:56Z",
  "status_changed_by": "<string>",
  "status_note": "<string>",
  "original_severity": "critical",
  "severity_changed_at": "2023-11-07T05:31:56Z",
  "severity_changed_by": "<string>",
  "severity_override_reason": "<string>",
  "retest_of_vulnerability_id": "<string>",
  "display_number": 123,
  "location_meta": {
    "branch": "<string>",
    "provider": "<string>",
    "repo_url": "<string>"
  },
  "latest_retest": {
    "scan_id": "<string>",
    "outcome": "running",
    "inconclusive_reason": "<string>",
    "started_at": "2023-11-07T05:31:56Z"
  },
  "fix_pr_eligible": true,
  "fix_pr_reason": "<string>",
  "fix_pr_url": "<string>",
  "cvss_adjustment": {
    "breakdown": {
      "attack_vector": "N",
      "attack_complexity": "L",
      "privileges_required": "N",
      "user_interaction": "N",
      "scope": "U",
      "confidentiality": "N",
      "integrity": "N",
      "availability": "N"
    },
    "score": 123,
    "vector": "<string>",
    "severity": "critical",
    "reason": "<string>",
    "adjusted_by": "<string>",
    "adjusted_at": "2023-11-07T05:31:56Z",
    "original": {
      "score": 123,
      "vector": "<string>",
      "severity": "<string>"
    }
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

Authorizations

Authorization

string

header

required

API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.

Path Parameters

vulnerabilityId

string

required

ID of the vulnerability. Use the id field of a finding from listVulnerabilities.

Response

Vulnerability details.

string

required

title

string

required

description

string

required

created_at

string<date-time>

required

status

enum<string>

required

Available options:

open,

in_progress,

snoozed,

fixed,

ignored,

not_affected

severity

enum<string>

required

Available options:

critical,

high,

medium,

low

scan_id

string<uuid> | null

pr_review_id

string<uuid> | null

cve

string | null

cvss

number | null

potential_risk_saving

number | null

risk_saving_description

string | null

impact

string | null

endpoint

string | null

method

string | null

target

string | null

technical_analysis

string | null

poc_description

string | null

poc_script_code

string | null

code_diff

string | null

code_file

string | null

code_before

string | null

code_after

string | null

cwe

string[] | null

code_locations

object[] | null

Show child attributes

remediation_steps

string | null

fix_pr_body

string | null

evidence

string | null

assumptions

string | null

fix_effort

enum<string>

Available options:

trivial,

low,

medium,

high

cvss_breakdown

object | null

Show child attributes

status_changed_at

string<date-time> | null

status_changed_by

string | null

status_note

string | null

original_severity

enum<string>

Available options:

critical,

high,

medium,

low

severity_changed_at

string<date-time> | null

severity_changed_by

string | null

severity_override_reason

string | null

retest_of_vulnerability_id

string | null

display_number

integer | null

Human-readable STRIX-ID number.

location_meta

object | null

Show child attributes

latest_retest

object | null

The newest retest of the issue. The value is null when nobody retested the issue.

Show child attributes

fix_pr_eligible

boolean

fix_pr_reason

string | null

fix_pr_url

string | null

cvss_adjustment

object | null

Manual CVSS adjustment and the rating before the first adjustment. A label-only severity change clears this record without changing the numeric score.

Show child attributes

Error

A valid request URL is required to generate request examples

{
  "id": "<string>",
  "title": "<string>",
  "description": "<string>",
  "created_at": "2023-11-07T05:31:56Z",
  "status": "open",
  "severity": "critical",
  "scan_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "pr_review_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "cve": "<string>",
  "cvss": 123,
  "potential_risk_saving": 123,
  "risk_saving_description": "<string>",
  "impact": "<string>",
  "endpoint": "<string>",
  "method": "<string>",
  "target": "<string>",
  "technical_analysis": "<string>",
  "poc_description": "<string>",
  "poc_script_code": "<string>",
  "code_diff": "<string>",
  "code_file": "<string>",
  "code_before": "<string>",
  "code_after": "<string>",
  "cwe": [
    "<string>"
  ],
  "code_locations": [
    {
      "file": "<string>",
      "start_line": 123,
      "end_line": 123,
      "snippet": "<string>",
      "label": "<string>",
      "fix_before": "<string>",
      "fix_after": "<string>"
    }
  ],
  "remediation_steps": "<string>",
  "fix_pr_body": "<string>",
  "evidence": "<string>",
  "assumptions": "<string>",
  "fix_effort": "trivial",
  "cvss_breakdown": {
    "attack_vector": "<string>",
    "attack_complexity": "<string>",
    "privileges_required": "<string>",
    "user_interaction": "<string>",
    "scope": "<string>",
    "confidentiality": "<string>",
    "integrity": "<string>",
    "availability": "<string>"
  },
  "status_changed_at": "2023-11-07T05:31:56Z",
  "status_changed_by": "<string>",
  "status_note": "<string>",
  "original_severity": "critical",
  "severity_changed_at": "2023-11-07T05:31:56Z",
  "severity_changed_by": "<string>",
  "severity_override_reason": "<string>",
  "retest_of_vulnerability_id": "<string>",
  "display_number": 123,
  "location_meta": {
    "branch": "<string>",
    "provider": "<string>",
    "repo_url": "<string>"
  },
  "latest_retest": {
    "scan_id": "<string>",
    "outcome": "running",
    "inconclusive_reason": "<string>",
    "started_at": "2023-11-07T05:31:56Z"
  },
  "fix_pr_eligible": true,
  "fix_pr_reason": "<string>",
  "fix_pr_url": "<string>",
  "cvss_adjustment": {
    "breakdown": {
      "attack_vector": "N",
      "attack_complexity": "L",
      "privileges_required": "N",
      "user_interaction": "N",
      "scope": "U",
      "confidentiality": "N",
      "integrity": "N",
      "availability": "N"
    },
    "score": 123,
    "vector": "<string>",
    "severity": "critical",
    "reason": "<string>",
    "adjusted_by": "<string>",
    "adjusted_at": "2023-11-07T05:31:56Z",
    "original": {
      "score": 123,
      "vector": "<string>",
      "severity": "<string>"
    }
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

Analytics

Asset Discovery

Audit

Billing

Chat

CLI

Connectors

Containers

Assets

Test Users

Integrations

Knowledge

License

LLM

Run Logs

Organization

Invitations

Members

PR Reviews

Vulnerabilities

Supply Chain

Scans

Schedules

Search

Tokens

Uploads

Webhooks

Workspaces

Repositories

Get vulnerability details

Authorizations

Path Parameters

Response