> ## Documentation Index
> Fetch the complete documentation index at: https://docs.app.strix.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Vulnerabilities

> List, inspect, and update vulnerability findings

export const ScarfPixel = () => <img referrerPolicy="no-referrer-when-downgrade" src="https://static.scarf.sh/a.png?x-pxid=831669b6-b4bd-42cb-8832-2122c03e1d5f" alt="" width="1" height="1" style={{
  position: "absolute",
  width: 0,
  height: 0,
  opacity: 0,
  pointerEvents: "none"
}} />;

<ScarfPixel />

## List vulnerabilities

Retrieve vulnerabilities across pentests with filtering and pagination.

```bash theme={null}
curl -X GET "https://app.strix.ai/api/v1/vulnerabilities" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"
```

**Required scope:** `vulnerabilities:read`

## Get vulnerability detail

```bash theme={null}
curl -X GET "https://app.strix.ai/api/v1/vulnerabilities/<VULNERABILITY_ID>" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"
```

**Required scope:** `vulnerabilities:read`

## Update vulnerability status

Mark findings as in-progress, fixed, or add notes for remediation tracking:

```bash theme={null}
curl -X PATCH "https://app.strix.ai/api/v1/vulnerabilities/<VULNERABILITY_ID>" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{"status":"in_progress","note":"Linked to remediation ticket"}'
```

**Required scope:** `vulnerabilities:write`

### Status values

| Status        | Description                |
| ------------- | -------------------------- |
| `open`        | New or unaddressed finding |
| `in_progress` | Actively being remediated  |
| `fixed`       | Remediation applied        |
| `ignored`     | Acknowledged but accepted  |

## Retest a vulnerability

Re-run validation against a single finding to confirm whether it is still exploitable:

```bash theme={null}
curl -X POST "https://app.strix.ai/api/v1/vulnerabilities/<VULNERABILITY_ID>/retest" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"
```

**Required scope:** `scans:write`

## Create a fix pull request

Open a pull request with an AI-generated remediation for the finding:

```bash theme={null}
curl -X POST "https://app.strix.ai/api/v1/vulnerabilities/<VULNERABILITY_ID>/create-fix-pr" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"
```

**Required scope:** `vulnerabilities:write`

## Get vulnerability history

Retrieve the status/retest history for a finding:

```bash theme={null}
curl -X GET "https://app.strix.ai/api/v1/vulnerabilities/<VULNERABILITY_ID>/history" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"
```

**Required scope:** `vulnerabilities:read`