Get Issues

Retrieve a list of tracked CVE issues from the Nixpkgs Security Tracker.

Endpoint

GET /api/v1/issues

Query Parameters

Parameter	Type	Default	Description
severity	string	all	Filter by severity: critical, high, medium, low
status	string	all	Filter by status: open, closed
limit	number	100	Maximum number of results (max: 500)
page	number	1	Page number for pagination

Response

{
  "success": true,
  "data": {
    "issues": [
      {
        "number": 12345,
        "title": "CVE-2024-XXXX: Package vulnerability description",
        "url": "https://github.com/NixOS/nixpkgs/issues/12345",
        "state": "open",
        "severity": "high",
        "created_at": "2024-01-15T10:00:00Z",
        "updated_at": "2024-01-15T12:00:00Z",
        "labels": [
          { "name": "1.severity: critical", "color": "d73a4a" }
        ],
        "cves": ["CVE-2024-XXXX"],
        "packages": ["openssl"],
        "hasFixAvailable": true,
        "assignees": []
      }
    ],
    "total": 150,
    "page": 1,
    "pageSize": 100
  },
  "timestamp": "2024-01-15T12:00:00.000Z"
}

Response Fields

Issue Object

Field	Type	Description
number	number	GitHub issue number
title	string	Issue title, typically includes CVE ID
url	string	Direct link to the GitHub issue
state	string	open or closed
severity	string	Extracted severity level
created_at	string	ISO 8601 timestamp
updated_at	string	ISO 8601 timestamp
labels	array	GitHub labels with name and color
cves	array	List of CVE identifiers extracted from title
packages	array	Affected package names
hasFixAvailable	boolean	Whether a fix is available
assignees	array	GitHub users assigned to the issue

Examples

Get All Open Issues

curl "https://api.vulnpatch.dev/api/v1/issues"

Get Critical/High Severity Issues

curl "https://api.vulnpatch.dev/api/v1/issues?severity=critical,high"

Pagination

curl "https://api.vulnpatch.dev/api/v1/issues?page=2&limit=50"

Code Examples

JavaScript

async function getCriticalIssues() {
  const response = await fetch(
    'https://api.vulnpatch.dev/api/v1/issues?severity=critical'
  );
  const { data } = await response.json();

  for (const issue of data.issues) {
    console.log(`${issue.severity}: ${issue.title}`);
  }
}

Python

import requests

response = requests.get(
    'https://api.vulnpatch.dev/api/v1/issues',
    params={'severity': 'critical,high'}
)
data = response.json()['data']

for issue in data['issues']:
    print(f"{issue['severity']}: {issue['title']}")

Caching

This endpoint is cached for 5 minutes. The X-Cache header indicates cache status.