> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oasm.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Vulnerability timeline

> Project runs that scanned the asset with the reporting tool, marked seen or missed.



## OpenAPI

````yaml /api-reference/openapi.json get /api/projects/{id}/vulnerabilities/{vulnerabilityId}/timeline
openapi: 3.0.0
info:
  title: Open Attack Surface Management
  description: Open-source platform for cybersecurity Attack Surface Management (ASM)
  version: '1.0'
  contact: {}
servers:
  - url: https://{baseUrl}/api/v1
    variables:
      baseUrl:
        default: localhost:3000
        description: API server hostname with port (e.g. localhost:3000, api.example.com)
security: []
tags: []
externalDocs:
  description: Authentication Docs
  url: auth/docs
paths:
  /api/projects/{id}/vulnerabilities/{vulnerabilityId}/timeline:
    get:
      tags:
        - Projects
      summary: Vulnerability timeline
      description: >-
        Project runs that scanned the asset with the reporting tool, marked seen
        or missed.
      operationId: ProjectsController_getVulnerabilityTimeline
      parameters:
        - name: id
          required: true
          in: path
          schema:
            type: string
        - name: vulnerabilityId
          required: true
          in: path
          schema:
            type: string
        - name: X-Workspace-Id
          in: header
          description: Workspace ID
          schema:
            type: string
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VulnerabilityTimelineDto'
                allOf:
                  - $ref: '#/components/schemas/AppResponseSerialization'
components:
  schemas:
    VulnerabilityTimelineDto:
      type: object
      properties:
        vulnerability:
          $ref: '#/components/schemas/ProjectVulnerabilityDto'
        runs:
          description: >-
            Project runs since the first sighting that scanned the asset with
            the reporting tool
          type: array
          items:
            $ref: '#/components/schemas/TimelineRunDto'
      required:
        - vulnerability
        - runs
    AppResponseSerialization:
      type: object
      properties: {}
    ProjectVulnerabilityDto:
      type: object
      properties:
        id:
          type: string
        name:
          type: string
        severity:
          allOf:
            - $ref: '#/components/schemas/Severity'
        cveId:
          nullable: true
          type: array
          items:
            type: string
        affectedUrl:
          type: string
          nullable: true
        assetId:
          type: string
        assetValue:
          type: string
        toolName:
          type: string
          nullable: true
        status:
          allOf:
            - $ref: '#/components/schemas/VulnerabilityStatus'
        provenance:
          allOf:
            - $ref: '#/components/schemas/VulnerabilityProvenance'
        timesSeen:
          type: number
        firstSeen:
          $ref: '#/components/schemas/ProjectSightingDto'
        lastSeen:
          $ref: '#/components/schemas/ProjectSightingDto'
      required:
        - id
        - name
        - severity
        - assetId
        - assetValue
        - status
        - provenance
        - timesSeen
        - firstSeen
        - lastSeen
    TimelineRunDto:
      type: object
      properties:
        id:
          type: string
        createdAt:
          format: date-time
          type: string
        workflowName:
          type: string
        sighting:
          allOf:
            - $ref: '#/components/schemas/TimelineSighting'
      required:
        - id
        - createdAt
        - workflowName
        - sighting
    Severity:
      type: string
      enum:
        - info
        - low
        - medium
        - high
        - critical
    VulnerabilityStatus:
      type: string
      enum:
        - open
        - dismissed
        - all
    VulnerabilityProvenance:
      type: string
      enum:
        - new
        - recurring
        - not_seen
    ProjectSightingDto:
      type: object
      properties:
        runId:
          type: string
          nullable: true
        at:
          format: date-time
          type: string
      required:
        - at
    TimelineSighting:
      type: string
      enum:
        - seen
        - missed
        - unknown

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.