List Vulnerability Findings

curl --request GET \
  --url https://api.leen.dev/v2/vulnerability_findings \
  --header 'X-API-KEY: <api-key>' \
  --header 'X-CONNECTION-ID: <api-key>'

import requests

url = "https://api.leen.dev/v2/vulnerability_findings"

headers = {
    "X-CONNECTION-ID": "<api-key>",
    "X-API-KEY": "<api-key>"
}

response = requests.get(url, headers=headers)

print(response.text)

const options = {
  method: 'GET',
  headers: {'X-CONNECTION-ID': '<api-key>', 'X-API-KEY': '<api-key>'}
};

fetch('https://api.leen.dev/v2/vulnerability_findings', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.leen.dev/v2/vulnerability_findings",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-KEY: <api-key>",
    "X-CONNECTION-ID: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.leen.dev/v2/vulnerability_findings"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-CONNECTION-ID", "<api-key>")
	req.Header.Add("X-API-KEY", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://api.leen.dev/v2/vulnerability_findings")
  .header("X-CONNECTION-ID", "<api-key>")
  .header("X-API-KEY", "<api-key>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.leen.dev/v2/vulnerability_findings")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-CONNECTION-ID"] = '<api-key>'
request["X-API-KEY"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "items": [
    {
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "vendor_attributes": {
        "id": "<string>",
        "state": "<string>",
        "severity": "<string>",
        "url": "<string>",
        "updated_at": "2023-11-07T05:31:56Z",
        "created_at": "2023-11-07T05:31:56Z",
        "vulnerability_identifiers": [
          {
            "type": "CVE",
            "value": "<string>"
          }
        ],
        "data": {
          "scanner": {
            "id": "<string>",
            "vendor": "<string>",
            "name": "<string>"
          },
          "vendor": "GITLAB"
        }
      },
      "title": "<string>",
      "description": "<string>",
      "analytic_output": "<string>",
      "first_seen": "2023-11-07T05:31:56Z",
      "last_seen": "2023-11-07T05:31:56Z",
      "ticket": {
        "uid": "<string>",
        "url": "<string>",
        "status": "<string>"
      },
      "has_fix": true,
      "remediation": "<string>",
      "product": {
        "vendor_name": "<string>",
        "name": "<string>"
      },
      "analytic": {
        "type": "<string>",
        "uid": "<string>",
        "name": "<string>",
        "url": "<string>"
      },
      "resource_related": [
        {
          "affected_code": {
            "file_path": "<string>",
            "start_line_number": 123,
            "end_line_number": 123,
            "url": "<string>"
          },
          "affected_image": "<string>",
          "affected_os": "<string>",
          "affected_package": {
            "name": "<string>",
            "version": "<string>",
            "package_manager": "<string>"
          },
          "affected_platform": "<string>",
          "port": 123,
          "protocol": "<string>",
          "service": "<string>"
        }
      ],
      "state_updated_at": "2023-11-07T05:31:56Z",
      "resources": [
        {
          "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
          "name": "<string>",
          "vendor": "<string>",
          "vendor_attributes": {
            "id": "<string>",
            "data": {
              "vendor": "qualys",
              "host_id": "<string>",
              "asset_id": "<string>",
              "tracking_method": "<string>"
            }
          },
          "tags": [
            {
              "key": "<string>",
              "value": "<string>"
            }
          ],
          "groups": [
            {
              "name": "<string>",
              "uid": "<string>"
            }
          ],
          "data": {
            "hostnames": [
              "<string>"
            ],
            "image": "<string>"
          },
          "cloud_metadata": {
            "account_id": "<string>",
            "account_name": "<string>",
            "cloud_provider": "<string>",
            "image_id": "<string>",
            "instance_id": "<string>",
            "instance_type": "<string>",
            "region": "<string>",
            "subnet_id": "<string>",
            "vpc_id": "<string>"
          },
          "url": "<string>",
          "first_seen": "2023-11-07T05:31:56Z",
          "last_seen": "2023-11-07T05:31:56Z"
        }
      ],
      "vulnerabilities": [
        {
          "uid": "<string>",
          "published": "2023-11-07T05:31:56Z",
          "last_modified": "2023-11-07T05:31:56Z",
          "status": "<string>",
          "source_identifier": "<string>",
          "cvss_scores": [
            {
              "version": "<string>",
              "score": 123,
              "vector": "<string>",
              "severity": "<string>"
            }
          ],
          "description": "<string>",
          "references": [
            {
              "url": "<string>",
              "source": "<string>",
              "tags": [
                "<string>"
              ]
            }
          ],
          "weaknesses": [
            "<string>"
          ],
          "created_at": "2023-11-07T05:31:56Z",
          "updated_at": "2023-11-07T05:31:56Z"
        }
      ]
    }
  ],
  "next_cursor": "<string>",
  "previous_cursor": "<string>"
}

{
  "type": "<string>",
  "code": "<string>",
  "message": "<string>",
  "detail": [
    {}
  ]
}

Vulnerability Findings

List Vulnerability Findings

List vulnerability findings with keyset pagination and filtering options.

severity: Filter by severity (comma-separated list, e.g., ‘CRITICAL,HIGH’)
state: Filter by state (comma-separated list, e.g., ‘OPEN,REOPENED’)
has_fix: Filter by whether a fix is available
first_seen_since: Filter by findings first seen after this date
last_seen_since: Filter by findings last seen after this date
state_updated_since: Filter by findings with state updated after this date
resourceId: Filter by resource ID (comma-separated list)
ids: Filter by finding IDs (comma-separated list of UUIDs, max 100)

GET

vulnerability_findings

curl --request GET \
  --url https://api.leen.dev/v2/vulnerability_findings \
  --header 'X-API-KEY: <api-key>' \
  --header 'X-CONNECTION-ID: <api-key>'

import requests

url = "https://api.leen.dev/v2/vulnerability_findings"

headers = {
    "X-CONNECTION-ID": "<api-key>",
    "X-API-KEY": "<api-key>"
}

response = requests.get(url, headers=headers)

print(response.text)

const options = {
  method: 'GET',
  headers: {'X-CONNECTION-ID': '<api-key>', 'X-API-KEY': '<api-key>'}
};

fetch('https://api.leen.dev/v2/vulnerability_findings', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.leen.dev/v2/vulnerability_findings",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "X-API-KEY: <api-key>",
    "X-CONNECTION-ID: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.leen.dev/v2/vulnerability_findings"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-CONNECTION-ID", "<api-key>")
	req.Header.Add("X-API-KEY", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://api.leen.dev/v2/vulnerability_findings")
  .header("X-CONNECTION-ID", "<api-key>")
  .header("X-API-KEY", "<api-key>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.leen.dev/v2/vulnerability_findings")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["X-CONNECTION-ID"] = '<api-key>'
request["X-API-KEY"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "items": [
    {
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "vendor_attributes": {
        "id": "<string>",
        "state": "<string>",
        "severity": "<string>",
        "url": "<string>",
        "updated_at": "2023-11-07T05:31:56Z",
        "created_at": "2023-11-07T05:31:56Z",
        "vulnerability_identifiers": [
          {
            "type": "CVE",
            "value": "<string>"
          }
        ],
        "data": {
          "scanner": {
            "id": "<string>",
            "vendor": "<string>",
            "name": "<string>"
          },
          "vendor": "GITLAB"
        }
      },
      "title": "<string>",
      "description": "<string>",
      "analytic_output": "<string>",
      "first_seen": "2023-11-07T05:31:56Z",
      "last_seen": "2023-11-07T05:31:56Z",
      "ticket": {
        "uid": "<string>",
        "url": "<string>",
        "status": "<string>"
      },
      "has_fix": true,
      "remediation": "<string>",
      "product": {
        "vendor_name": "<string>",
        "name": "<string>"
      },
      "analytic": {
        "type": "<string>",
        "uid": "<string>",
        "name": "<string>",
        "url": "<string>"
      },
      "resource_related": [
        {
          "affected_code": {
            "file_path": "<string>",
            "start_line_number": 123,
            "end_line_number": 123,
            "url": "<string>"
          },
          "affected_image": "<string>",
          "affected_os": "<string>",
          "affected_package": {
            "name": "<string>",
            "version": "<string>",
            "package_manager": "<string>"
          },
          "affected_platform": "<string>",
          "port": 123,
          "protocol": "<string>",
          "service": "<string>"
        }
      ],
      "state_updated_at": "2023-11-07T05:31:56Z",
      "resources": [
        {
          "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
          "name": "<string>",
          "vendor": "<string>",
          "vendor_attributes": {
            "id": "<string>",
            "data": {
              "vendor": "qualys",
              "host_id": "<string>",
              "asset_id": "<string>",
              "tracking_method": "<string>"
            }
          },
          "tags": [
            {
              "key": "<string>",
              "value": "<string>"
            }
          ],
          "groups": [
            {
              "name": "<string>",
              "uid": "<string>"
            }
          ],
          "data": {
            "hostnames": [
              "<string>"
            ],
            "image": "<string>"
          },
          "cloud_metadata": {
            "account_id": "<string>",
            "account_name": "<string>",
            "cloud_provider": "<string>",
            "image_id": "<string>",
            "instance_id": "<string>",
            "instance_type": "<string>",
            "region": "<string>",
            "subnet_id": "<string>",
            "vpc_id": "<string>"
          },
          "url": "<string>",
          "first_seen": "2023-11-07T05:31:56Z",
          "last_seen": "2023-11-07T05:31:56Z"
        }
      ],
      "vulnerabilities": [
        {
          "uid": "<string>",
          "published": "2023-11-07T05:31:56Z",
          "last_modified": "2023-11-07T05:31:56Z",
          "status": "<string>",
          "source_identifier": "<string>",
          "cvss_scores": [
            {
              "version": "<string>",
              "score": 123,
              "vector": "<string>",
              "severity": "<string>"
            }
          ],
          "description": "<string>",
          "references": [
            {
              "url": "<string>",
              "source": "<string>",
              "tags": [
                "<string>"
              ]
            }
          ],
          "weaknesses": [
            "<string>"
          ],
          "created_at": "2023-11-07T05:31:56Z",
          "updated_at": "2023-11-07T05:31:56Z"
        }
      ]
    }
  ],
  "next_cursor": "<string>",
  "previous_cursor": "<string>"
}

{
  "type": "<string>",
  "code": "<string>",
  "message": "<string>",
  "detail": [
    {}
  ]
}

Authorizations

X-CONNECTION-ID

string

header

required

X-API-KEY

string

header

required

Query Parameters

sort

string | null

Sort by field

Pattern:

^severity$|^severity\:asc$|^severity\:desc$|^state$|^state\:asc$|^state\:desc$|^first_seen$|^first_seen\:asc$|^first_seen\:desc$|^last_seen$|^last_seen\:asc$|^last_seen\:desc$|^updated_at$|^updated_at\:asc$|^updated_at\:desc$|^state_updated_at$|^state_updated_at\:asc$|^state_updated_at\:desc$

severity

string | null

Filter by severity (comma-separated list, e.g., 'CRITICAL,HIGH')

state

string | null

Filter by state (comma-separated list, e.g., 'OPEN,REOPENED')

has_fix

boolean | null

Filter by whether a fix is available

firstSeenSince

string<date-time> | null

Filter by findings first seen after this date

lastSeenSince

string<date-time> | null

Filter by findings last seen after this date

stateUpdatedSince

string<date-time> | null

Filter by findings with state updated after this date

resourceId

string | null

Filter by resource ID (comma-separated list)

ids

string | null

Filter by finding IDs (comma-separated list of UUIDs, max 100)

updatedSince

string<date-time> | null

Datetime filter, only return items updated since this datetime. Example format: 2021-01-01T00:00:00+00:00

cursor

string | null

Skip token to continue from the last item in the previous page

limit

integer

default:100

Limit size (page size)

Required range: x >= 0

use_pool

boolean

default:true

Response

Successful Response

items

VulnerabilityFindingV2 · object[]

required

List of items returned in the response

Show child attributes

next_cursor

string | null

Skip token to continue from the last item in the previous page

previous_cursor

string | null

Skip token to continue from the first item in the previous page

Cursor Pagination Get Vulnerability Finding by ID

API Documentation (V2)

Vulnerability Findings

Resources

List Vulnerability Findings

Authorizations

Query Parameters

Response