Update vulnerability status or severity

PATCH

vulnerabilities

{vulnerabilityId}

Error

A valid request URL is required to generate request examples

{
  "id": "<string>",
  "title": "<string>",
  "description": "<string>",
  "created_at": "2023-11-07T05:31:56Z",
  "status": "open",
  "severity": "critical",
  "scan_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "pr_review_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "cve": "<string>",
  "cvss": 123,
  "potential_risk_saving": 123,
  "risk_saving_description": "<string>",
  "impact": "<string>",
  "endpoint": "<string>",
  "method": "<string>",
  "target": "<string>",
  "technical_analysis": "<string>",
  "poc_description": "<string>",
  "poc_script_code": "<string>",
  "code_diff": "<string>",
  "code_file": "<string>",
  "code_before": "<string>",
  "code_after": "<string>",
  "cwe": [
    "<string>"
  ],
  "code_locations": [
    {
      "file": "<string>",
      "start_line": 123,
      "end_line": 123,
      "snippet": "<string>",
      "label": "<string>",
      "fix_before": "<string>",
      "fix_after": "<string>"
    }
  ],
  "remediation_steps": "<string>",
  "fix_pr_body": "<string>",
  "evidence": "<string>",
  "assumptions": "<string>",
  "fix_effort": "trivial",
  "cvss_breakdown": {
    "attack_vector": "<string>",
    "attack_complexity": "<string>",
    "privileges_required": "<string>",
    "user_interaction": "<string>",
    "scope": "<string>",
    "confidentiality": "<string>",
    "integrity": "<string>",
    "availability": "<string>"
  },
  "status_changed_at": "2023-11-07T05:31:56Z",
  "status_changed_by": "<string>",
  "status_note": "<string>",
  "original_severity": "critical",
  "severity_changed_at": "2023-11-07T05:31:56Z",
  "severity_changed_by": "<string>",
  "severity_override_reason": "<string>",
  "retest_of_vulnerability_id": "<string>",
  "display_number": 123,
  "location_meta": {
    "branch": "<string>",
    "provider": "<string>",
    "repo_url": "<string>"
  },
  "fix_pr_eligible": true,
  "fix_pr_reason": "<string>",
  "fix_pr_url": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

Authorizations

Authorization

string

header

required

API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.

Path Parameters

vulnerabilityId

string

required

ID of the vulnerability. Use the id field of a finding from listVulnerabilities.

Body

application/json

At least one of status or severity must be provided.

status

enum<string>

New triage status of the finding.

Available options:

open,

in_progress,

snoozed,

fixed,

ignored,

not_affected

note

string

Optional note when changing status.

severity

enum<string>

New severity of the finding.

Available options:

critical,

high,

medium,

low

severity_reason

string

Optional reason for the severity change.

Maximum string length: 1000

Response

Updated vulnerability.

string

required

title

string

required

description

string

required

created_at

string<date-time>

required

status

enum<string>

required

Available options:

open,

in_progress,

snoozed,

fixed,

ignored,

not_affected

severity

enum<string>

required

Available options:

critical,

high,

medium,

low

scan_id

string<uuid> | null

pr_review_id

string<uuid> | null

cve

string | null

cvss

number | null

potential_risk_saving

number | null

risk_saving_description

string | null

impact

string | null

endpoint

string | null

method

string | null

target

string | null

technical_analysis

string | null

poc_description

string | null

poc_script_code

string | null

code_diff

string | null

code_file

string | null

code_before

string | null

code_after

string | null

cwe

string[] | null

code_locations

object[] | null

Show child attributes

remediation_steps

string | null

fix_pr_body

string | null

evidence

string | null

assumptions

string | null

fix_effort

enum<string>

Available options:

trivial,

low,

medium,

high

cvss_breakdown

object | null

Show child attributes

status_changed_at

string<date-time> | null

status_changed_by

string | null

status_note

string | null

original_severity

enum<string>

Available options:

critical,

high,

medium,

low

severity_changed_at

string<date-time> | null

severity_changed_by

string | null

severity_override_reason

string | null

retest_of_vulnerability_id

string | null

display_number

integer | null

Human-readable STRIX-ID number.

location_meta

object | null

Show child attributes

fix_pr_eligible

boolean

fix_pr_reason

string | null

fix_pr_url

string | null

Error

A valid request URL is required to generate request examples

{
  "id": "<string>",
  "title": "<string>",
  "description": "<string>",
  "created_at": "2023-11-07T05:31:56Z",
  "status": "open",
  "severity": "critical",
  "scan_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "pr_review_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "cve": "<string>",
  "cvss": 123,
  "potential_risk_saving": 123,
  "risk_saving_description": "<string>",
  "impact": "<string>",
  "endpoint": "<string>",
  "method": "<string>",
  "target": "<string>",
  "technical_analysis": "<string>",
  "poc_description": "<string>",
  "poc_script_code": "<string>",
  "code_diff": "<string>",
  "code_file": "<string>",
  "code_before": "<string>",
  "code_after": "<string>",
  "cwe": [
    "<string>"
  ],
  "code_locations": [
    {
      "file": "<string>",
      "start_line": 123,
      "end_line": 123,
      "snippet": "<string>",
      "label": "<string>",
      "fix_before": "<string>",
      "fix_after": "<string>"
    }
  ],
  "remediation_steps": "<string>",
  "fix_pr_body": "<string>",
  "evidence": "<string>",
  "assumptions": "<string>",
  "fix_effort": "trivial",
  "cvss_breakdown": {
    "attack_vector": "<string>",
    "attack_complexity": "<string>",
    "privileges_required": "<string>",
    "user_interaction": "<string>",
    "scope": "<string>",
    "confidentiality": "<string>",
    "integrity": "<string>",
    "availability": "<string>"
  },
  "status_changed_at": "2023-11-07T05:31:56Z",
  "status_changed_by": "<string>",
  "status_note": "<string>",
  "original_severity": "critical",
  "severity_changed_at": "2023-11-07T05:31:56Z",
  "severity_changed_by": "<string>",
  "severity_override_reason": "<string>",
  "retest_of_vulnerability_id": "<string>",
  "display_number": 123,
  "location_meta": {
    "branch": "<string>",
    "provider": "<string>",
    "repo_url": "<string>"
  },
  "fix_pr_eligible": true,
  "fix_pr_reason": "<string>",
  "fix_pr_url": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

Scans

Audit

Vulnerabilities

Assets

Schedules

Tokens

Webhooks

Organization

Members

Invitations

Analytics

LLM

Connectors

Chat

PR Reviews

Knowledge

Integrations

Uploads

Test Users

License

Supply Chain

CLI

Billing

Workspaces

Update vulnerability status or severity

Authorizations

Path Parameters

Body

Response