Skip to main content
This endpoint is not available to all customers. If you are interested please contact support. Query issues for a batch of packages identified by Package URL (purl). Only direct vulnerabilities are returned, transitive vulnerabilities (from dependencies) are not returned because they can vary depending on context.

​
Parameters

ParameterDescription
Organization IDUnique identifier for an organization.
Package URLsA comma-separated list of Package URLs (purl). Supported purl types are apk, cargo, cocoapods, composer, deb, gem, generic, hex, maven, npm, nuget, pypi, rpm, and swift. A version for the package is also required.

​
Example Output

{
	"data": [
		{
			"attributes": {
				"coordinates": [
					{
						"remedies": [
							{
								"description": "Upgrade the package version to 5.4.0,6.4.0 to fix this vulnerability",
								"details": {
									"upgrade_package": "5.4.0,6.4.0"
								},
								"type": "indeterminate"
							}
						],
						"representations": [
							{
								"resource_path": ",5.4.0),[6.0.0.pr1,6.4.0)"
							}
						]
					}
				],
				"created_at": "2022-06-16T13:51:13Z",
				"description": "## Overview\\n\\n\\nAffected versions of this package are vulnerable to XML External Entity (XXE) Injection.",
				"effective_severity_level": "info",
				"problems": [
					{
						"disclosed_at": "1970-01-01T00:00:00.000Z",
						"discovered_at": "1970-01-01T00:00:00.000Z",
						"id": "CWE-61",
						"source": "CVE",
						"updated_at": "1970-01-01T00:00:00.000Z",
						"url": "http://example.com"
					}
				],
				"severities": [
					{
						"level": "medium",
						"score": 5.3,
						"source": "Snyk",
						"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
					}
				],
				"slots": {
					"disclosure_time": "2022-06-16T13:51:13Z",
					"exploit": "Not Defined",
					"publication_time": "2022-06-16T14:00:24.315507Z",
					"references": [
						{
							"title": "string",
							"url": "string"
						}
					]
				},
				"title": "XML External Entity (XXE) Injection",
				"type": "package_vulnerability",
				"updated_at": "2022-06-16T14:00:24.315507Z"
			},
			"id": "SNYK-JAVA-COMFASTERXMLWOODSTOX-2928754",
			"type": "issue"
		}
	],
	"jsonapi": {
		"version": "1.0"
	},
	"links": {
		"first": "https://example.com/api/resource?ending_before=v1.eyJpZCI6IjExIn0K",
		"last": "https://example.com/api/resource?starting_after=v1.eyJpZCI6IjMwIn0K",
		"next": "https://example.com/api/resource?starting_after=v1.eyJpZCI6IjEwIn0K"
	}
}

​
Workflow Library Example

List Issues for Many Package Urls with Snyk and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop