> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oasm.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Project vulnerabilities

> Vulnerabilities the project found, with provenance (new, recurring, not seen) computed against each one’s reference run.



## OpenAPI

````yaml /api-reference/openapi.json get /api/projects/{id}/vulnerabilities
openapi: 3.0.0
info:
  title: Open Attack Surface Management
  description: Open-source platform for cybersecurity Attack Surface Management (ASM)
  version: '1.0'
  contact: {}
servers:
  - url: https://{baseUrl}/api/v1
    variables:
      baseUrl:
        default: localhost:3000
        description: API server hostname with port (e.g. localhost:3000, api.example.com)
security: []
tags: []
externalDocs:
  description: Authentication Docs
  url: auth/docs
paths:
  /api/projects/{id}/vulnerabilities:
    get:
      tags:
        - Projects
      summary: Project vulnerabilities
      description: >-
        Vulnerabilities the project found, with provenance (new, recurring, not
        seen) computed against each one’s reference run.
      operationId: ProjectsController_getVulnerabilities
      parameters:
        - name: id
          required: true
          in: path
          schema:
            type: string
        - name: search
          required: false
          in: query
          schema:
            type: string
        - name: page
          required: false
          in: query
          schema:
            example: 1
            type: number
        - name: limit
          required: false
          in: query
          schema:
            example: 10
            type: number
        - name: sortBy
          required: false
          in: query
          schema:
            example: createdAt
            type: string
        - name: sortOrder
          required: false
          in: query
          schema:
            example: DESC
            type: string
        - name: provenance
          required: false
          in: query
          schema:
            $ref: '#/components/schemas/VulnerabilityProvenance'
        - name: severity
          required: false
          in: query
          schema:
            type: array
            items:
              $ref: '#/components/schemas/Severity'
        - name: status
          required: false
          in: query
          schema:
            default: open
            allOf:
              - $ref: '#/components/schemas/VulnerabilityStatus'
        - name: projectWorkflowId
          required: false
          in: query
          description: Seen by runs of this project workflow
          schema:
            type: string
        - name: jobHistoryId
          required: false
          in: query
          description: First or last seen in this run
          schema:
            type: string
        - name: assetId
          required: false
          in: query
          schema:
            type: string
        - name: X-Workspace-Id
          in: header
          description: Workspace ID
          schema:
            type: string
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ProjectVulnerabilitiesResponseDto'
                allOf:
                  - $ref: '#/components/schemas/AppResponseSerialization'
components:
  schemas:
    VulnerabilityProvenance:
      type: string
      enum:
        - new
        - recurring
        - not_seen
    Severity:
      type: string
      enum:
        - info
        - low
        - medium
        - high
        - critical
    VulnerabilityStatus:
      type: string
      enum:
        - open
        - dismissed
        - all
    ProjectVulnerabilitiesResponseDto:
      type: object
      properties:
        data:
          type: array
          items:
            $ref: '#/components/schemas/ProjectVulnerabilityDto'
        total:
          type: number
        page:
          type: number
        limit:
          type: number
        pageCount:
          type: number
        hasNextPage:
          type: boolean
        provenanceCounts:
          description: Under every filter but provenance
          allOf:
            - $ref: '#/components/schemas/ProvenanceCountsDto'
        severityCounts:
          description: Under every filter but severity
          allOf:
            - $ref: '#/components/schemas/SeverityCountsDto'
      required:
        - data
        - total
        - page
        - limit
        - pageCount
        - hasNextPage
        - provenanceCounts
        - severityCounts
    AppResponseSerialization:
      type: object
      properties: {}
    ProjectVulnerabilityDto:
      type: object
      properties:
        id:
          type: string
        name:
          type: string
        severity:
          allOf:
            - $ref: '#/components/schemas/Severity'
        cveId:
          nullable: true
          type: array
          items:
            type: string
        affectedUrl:
          type: string
          nullable: true
        assetId:
          type: string
        assetValue:
          type: string
        toolName:
          type: string
          nullable: true
        status:
          allOf:
            - $ref: '#/components/schemas/VulnerabilityStatus'
        provenance:
          allOf:
            - $ref: '#/components/schemas/VulnerabilityProvenance'
        timesSeen:
          type: number
        firstSeen:
          $ref: '#/components/schemas/ProjectSightingDto'
        lastSeen:
          $ref: '#/components/schemas/ProjectSightingDto'
      required:
        - id
        - name
        - severity
        - assetId
        - assetValue
        - status
        - provenance
        - timesSeen
        - firstSeen
        - lastSeen
    ProvenanceCountsDto:
      type: object
      properties:
        all:
          type: number
        new:
          type: number
        recurring:
          type: number
        notSeen:
          type: number
      required:
        - all
        - new
        - recurring
        - notSeen
    SeverityCountsDto:
      type: object
      properties:
        critical:
          type: number
        high:
          type: number
        medium:
          type: number
        low:
          type: number
        info:
          type: number
      required:
        - critical
        - high
        - medium
        - low
        - info
    ProjectSightingDto:
      type: object
      properties:
        runId:
          type: string
          nullable: true
        at:
          format: date-time
          type: string
      required:
        - at

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.