Dependency-Track unofficial
GET/v1/vulnerability/source/{source}/vuln/{vuln}/projects

List projects affected by a vulnerability

Lists projects affected by a vulnerability identified by its source and vuln values. Use searchText to match project names case insensitively, and pair pageNumber with pageSize or offset with limit to paginate results. The authenticated user must have VIEW_PORTFOLIO permission.

10 parameters
sourcestringrequired
The vulnerability source identifier.
vulnstringrequired
The vulnerability identifier within the specified source.
pageNumberstringoptional
The page number to return. Defaults to 1 when omitted; use with `pageSize`.
Default:1
pageSizestringoptional
The number of projects to return per page. Defaults to 100 when omitted; use with `pageNumber`.
Default:100
offsetstringoptional
The number of projects to skip before returning results. Use with `limit`.
limitstringoptional
The number of projects to return. Use with `offset`.
sortNamestringoptional
The name of the project field to sort on.
sortOrderstringoptional
The sort direction for `sortName`; the schema lists `asc, desc` as the allowed value.
Allowed:asc, desc
searchTextstringoptional
A case-insensitive substring to match against project names.
excludeInactivebooleanoptional
Set to true to exclude inactive projects from the results.

2 status codes
200Returns an array of projects affected by the specified vulnerability, including each project's active state, affected component UUIDs, dependency graph availability, name, UUID, and version.
activebooleanoptional
affectedComponentUuidsarray<string>optional
dependencyGraphAvailablebooleanoptional
namestringoptional
uuidstringoptional
versionstringoptional
401Returned when the request is unauthorized.

Error handling

A 401 is returned when the request is unauthorized. The authenticated user must have VIEW_PORTFOLIO permission, and the source and vuln path parameters identify the vulnerability.