Skip to main content
POST
Error

Authorizations

Authorization
string
header
required

API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.

Scopes

vulnerabilities:write

Body

application/json

Applies the same status and/or severity change to many vulnerabilities. Provide at least one of status or severity.

vulnerability_ids
string[]
required

Vulnerability ids to update. The server removes duplicates. Maximum 100 ids.

Required array length: 1 - 100 elements
status
enum<string>

New triage status for every listed finding.

Available options:
open,
in_progress,
snoozed,
fixed,
ignored,
not_affected
note
string

Optional note when changing status.

snoozed_until
string<date-time>

Required when status is snoozed. The date must be in the future.

severity
enum<string>

New severity for every listed finding.

Available options:
critical,
high,
medium,
low
severity_reason
string

Optional reason for the severity change.

Maximum string length: 1000

Response

Per-vulnerability update results.

total
integer
required

Number of unique vulnerability ids in the request.

succeeded
integer
required

Number of vulnerabilities that were updated or already had the requested values.

failed
integer
required

Number of vulnerabilities that were not updated.

results
object[]
required