Skip to main content
POST
Error

Authorizations

​
Authorization
string
header
required

API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.

Body

application/json

Applies the same status and/or severity change to many vulnerabilities. Provide at least one of status or severity.

​
vulnerability_ids
string[]
required

Vulnerability ids to update. The server removes duplicates. Maximum 100 ids.

Required array length: 1 - 100 elements
​
status
enum<string>

New triage status for every listed finding.

Available options:
open,
in_progress,
snoozed,
fixed,
ignored,
not_affected
​
note
string

Optional note when changing status.

​
snoozed_until
string<date-time>

Required when status is snoozed. The date must be in the future.

​
severity
enum<string>

New severity for every listed finding.

Available options:
critical,
high,
medium,
low
​
severity_reason
string

Optional reason for the severity change.

Maximum string length: 1000

Response

Per-vulnerability update results.

​
total
integer
required

Number of unique vulnerability ids in the request.

​
succeeded
integer
required

Number of vulnerabilities that were updated or already had the requested values.

​
failed
integer
required

Number of vulnerabilities that were not updated.

​
results
object[]
required