Skip to main content
GET
Get Issue by ID

Authorizations

X-API-KEY
string
header
required
X-CONNECTION-ID
string
header
required

Path Parameters

issue_id
string<uuid>
required

Response

Successful Response

code_repo
string
required

Repository the issue was found in, without the owner or organisation prefix -- api-server, not leeninc/api-server.

description
string
required

Full issue description, as the vendor states it.

first_seen
string<date-time>
required

When the vendor first recorded the issue. This is the vendor's own timestamp, not when Leen first synced it.

id
string<uuid>
required

Leen's identifier for this issue. Stable across syncs.

last_seen
string<date-time>
required

Most recent time the issue was observed. Vendors that report this use their timestamp; for the rest it is the sync that last returned the issue.

name
string
required

Issue title, as the vendor states it.

package_manager
string
required

Ecosystem the dependency came from, e.g. npm, pip, maven, as the vendor names it.

package_name
string
required

Affected package, for issues in a dependency.

package_version
string
required

Version of the affected package that is installed.

project_file_path
string
required

Path to the manifest or source file the issue was found in, relative to the repository root.

severity
enum<string>
required

Severity, normalised across vendors. Each vendor's own scale is mapped onto this one, so HIGH means the same thing whichever tool found it.

Available options:
INFO,
LOW,
MEDIUM,
HIGH,
CRITICAL
state
enum<string>
required

Lifecycle state, normalised across vendors. DELETED means the vendor stopped returning the issue rather than that it was fixed.

Available options:
OPEN,
CLOSED,
IGNORED,
DELETED
type
enum<string>
required

What kind of issue this is -- a dependency vulnerability, a licence problem, a code finding.

Available options:
VULNERABILITY,
LICENSE,
CLOUD,
CODE,
CUSTOM,
CONFIG
vendor
string
required

Connector that produced this issue, e.g. SNYK, SEMGREP.

vendor_id
string
required

The vendor's own identifier for the issue. Use it to correlate back to the vendor's console; it is not stable across vendors.

cvss_score
number | null

CVSS base score, where the vendor supplies one.

exploitable
boolean | null

Whether the vendor asserts this issue is exploitable. null means the vendor provided no signal, which is not the same as false.

is_patchable
boolean | null

Whether every affected component has a fixed version available. Null when the vendor reports no fix information at all, which is not the same as reporting that no fix exists.

issue_url
string | null

Link to the issue in the vendor's own console.

kb_url
string | null

Link to the advisory this issue is based on -- NVD where the vendor identifies one, otherwise the vendor's own knowledge base.

platform
string | null

Language or ecosystem the issue belongs to -- python, javascript, linux. Inferred from the source file or the vendor's identifier, so it is absent when neither says.

publication_time
string<date-time> | null

When the underlying advisory was published. Null where the vendor's API does not expose it: the issue's own creation date is a different thing, and substituting it would distort time-to-disclosure reporting.

reachability
enum<string> | null

Whether the vulnerable code is reached from this codebase. null means the vendor performs no reachability analysis; UNKNOWN means it ran but reached no conclusion.

Available options:
REACHABLE,
POTENTIALLY_REACHABLE,
UNREACHABLE,
UNKNOWN
remediation
string[] | null

Fixed versions or remediation steps, as the vendor states them. Null for issue types a vendor gives no remediation for, such as SAST findings.

repo_branch_name
string | null

Branch the issue was found on, where the vendor reports one.

repo_url
string | null

URL of the repository in its source-control provider.

state_updated_at
string<date-time> | null

When state last changed.

updated_at
string<date-time> | null

When Leen last changed any field on this record.

vendor_data
AikidoVendorData · object

The vendor's own payload for this issue, unnormalised. The shape differs per vendor; read it only when the normalised fields above are not enough.

vulnerability_identifiers
(AppSecIssueVulnIdentifierCVE · object | AppSecIssueVulnIdentifierCWE · object | AppSecIssueVulnIdentifierOWASP · object | AppSecIssueVulnIdentifierOther · object | AppSecIssueVulnIdentifierGHSA · object)[] | null

Public identifiers for the issue -- CVE, CWE, GHSA, OWASP. One issue can carry several, and vendors disagree about which they report.