Update vulnerability status or severity

PATCH

vulnerabilities

{vulnerabilityId}

Error

A valid request URL is required to generate request examples

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "title": "<string>",
  "description": "<string>",
  "created_at": "2023-11-07T05:31:56Z",
  "scan_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "pr_review_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "cve": "<string>",
  "cvss": 123,
  "potential_risk_saving": 123,
  "risk_saving_description": "<string>",
  "impact": "<string>",
  "endpoint": "<string>",
  "method": "<string>",
  "target": "<string>",
  "technical_analysis": "<string>",
  "poc_description": "<string>",
  "poc_script_code": "<string>",
  "code_diff": "<string>",
  "code_file": "<string>",
  "code_before": "<string>",
  "code_after": "<string>",
  "cwe": [
    "<string>"
  ],
  "code_locations": [
    {
      "file": "<string>",
      "start_line": 123,
      "end_line": 123,
      "snippet": "<string>",
      "label": "<string>",
      "fix_before": "<string>",
      "fix_after": "<string>"
    }
  ],
  "remediation_steps": "<string>",
  "fix_pr_body": "<string>",
  "evidence": "<string>",
  "assumptions": "<string>",
  "cvss_breakdown": {
    "attack_vector": "<string>",
    "attack_complexity": "<string>",
    "privileges_required": "<string>",
    "user_interaction": "<string>",
    "scope": "<string>",
    "confidentiality": "<string>",
    "integrity": "<string>",
    "availability": "<string>"
  },
  "status_changed_at": "2023-11-07T05:31:56Z",
  "status_changed_by": "<string>",
  "status_note": "<string>",
  "severity_changed_at": "2023-11-07T05:31:56Z",
  "severity_changed_by": "<string>",
  "severity_override_reason": "<string>",
  "retest_of_vulnerability_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "display_number": 123,
  "location_meta": {
    "branch": "<string>",
    "provider": "<string>",
    "repo_url": "<string>"
  },
  "fix_pr_eligible": true,
  "fix_pr_reason": "<string>",
  "fix_pr_url": "<string>"
}

{
  "detail": "<string>"
}

{
  "detail": "<string>"
}

{
  "detail": "<string>"
}

{
  "detail": "<string>"
}

Authorizations

Authorization

string

header

required

API token obtained from the Tokens endpoint. Include as Authorization: Bearer <token>.

Path Parameters

vulnerabilityId

string<uuid>

required

Body

application/json

At least one of status or severity must be provided.

status

enum<string>

Available options:

open,

in_progress,

fixed,

ignored

note

string

Optional note when changing status.

severity

enum<string>

Available options:

critical,

high,

medium,

low

severity_reason

string

Required when changing severity.

Maximum string length: 1000

Response

Updated vulnerability.

string<uuid>

required

title

string

required

description

string

required

created_at

string<date-time>

required

status

enum<string>

required

Available options:

open,

in_progress,

fixed,

ignored

severity

enum<string>

required

Available options:

critical,

high,

medium,

low

scan_id

string<uuid> | null

pr_review_id

string<uuid> | null

cve

string | null

cvss

number | null

potential_risk_saving

number | null

risk_saving_description

string | null

impact

string | null

endpoint

string | null

method

string | null

target

string | null

technical_analysis

string | null

poc_description

string | null

poc_script_code

string | null

code_diff

string | null

code_file

string | null

code_before

string | null

code_after

string | null

cwe

string[] | null

code_locations

object[] | null

Show child attributes

remediation_steps

string | null

fix_pr_body

string | null

evidence

string | null

assumptions

string | null

fix_effort

enum<string>

Available options:

trivial,

low,

medium,

high

cvss_breakdown

object | null

Show child attributes

status_changed_at

string<date-time> | null

status_changed_by

string | null

status_note

string | null

original_severity

enum<string>

Available options:

critical,

high,

medium,

low

severity_changed_at

string<date-time> | null

severity_changed_by

string | null

severity_override_reason

string | null

retest_of_vulnerability_id

string<uuid> | null

display_number

integer | null

Human-readable STRIX-ID number.

location_meta

object | null

Show child attributes

fix_pr_eligible

boolean

fix_pr_reason

string | null

fix_pr_url

string | null

Retest a vulnerabilityStarts a focused retest to confirm whether a single finding is still exploitable.

Error

A valid request URL is required to generate request examples

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "title": "<string>",
  "description": "<string>",
  "created_at": "2023-11-07T05:31:56Z",
  "scan_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "pr_review_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "cve": "<string>",
  "cvss": 123,
  "potential_risk_saving": 123,
  "risk_saving_description": "<string>",
  "impact": "<string>",
  "endpoint": "<string>",
  "method": "<string>",
  "target": "<string>",
  "technical_analysis": "<string>",
  "poc_description": "<string>",
  "poc_script_code": "<string>",
  "code_diff": "<string>",
  "code_file": "<string>",
  "code_before": "<string>",
  "code_after": "<string>",
  "cwe": [
    "<string>"
  ],
  "code_locations": [
    {
      "file": "<string>",
      "start_line": 123,
      "end_line": 123,
      "snippet": "<string>",
      "label": "<string>",
      "fix_before": "<string>",
      "fix_after": "<string>"
    }
  ],
  "remediation_steps": "<string>",
  "fix_pr_body": "<string>",
  "evidence": "<string>",
  "assumptions": "<string>",
  "cvss_breakdown": {
    "attack_vector": "<string>",
    "attack_complexity": "<string>",
    "privileges_required": "<string>",
    "user_interaction": "<string>",
    "scope": "<string>",
    "confidentiality": "<string>",
    "integrity": "<string>",
    "availability": "<string>"
  },
  "status_changed_at": "2023-11-07T05:31:56Z",
  "status_changed_by": "<string>",
  "status_note": "<string>",
  "severity_changed_at": "2023-11-07T05:31:56Z",
  "severity_changed_by": "<string>",
  "severity_override_reason": "<string>",
  "retest_of_vulnerability_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "display_number": 123,
  "location_meta": {
    "branch": "<string>",
    "provider": "<string>",
    "repo_url": "<string>"
  },
  "fix_pr_eligible": true,
  "fix_pr_reason": "<string>",
  "fix_pr_url": "<string>"
}

{
  "detail": "<string>"
}

{
  "detail": "<string>"
}

{
  "detail": "<string>"
}

{
  "detail": "<string>"
}

Scans

Audit

Vulnerabilities

Assets

Schedules

Tokens

Webhooks

Organization

Members

Invitations

Analytics

Connectors

Chat

PR Reviews

Knowledge

Integrations

Uploads

Test Users

Update vulnerability status or severity

Authorizations

Path Parameters

Body

Response