Sign in

v1

latestOpenAPI 3.1.02026-07-261690320.7 KB

Get issue details bulk

Returns the details of multiple issues. This feature needs to be enabled by Aikido support before it can be used.

get/issues/detail/bulk

Query parameters

issue_idsstring required

Comma separated list of issue ids. Maximum 100 issue ids can be provided at once.

include_epss_scoreboolean

Optional flag to include the EPSS score. Default is 'false'. Only available for Pro and Scale workspaces

Response

An array of issues

idinteger required

The issue ID.

group_idinteger required

The issue group ID.

type'open_source' | 'leaked_secret' | 'cloud' | 'iac' | 'sast' | 'surface_monitoring' | 'malware' | 'eol' | 'scm_security' | 'ai_pentest' | 'license' required

The type of issues in this group.

rulestring

The name of the rule that caused this finding (eg 'SQL injection')

attack_surface'frontend' | 'backend' | 'docker_container' | 'cloud' required

The attack surface of this issue.

severity_scoreinteger required

A number indicating the importance of the vulnerability

severity'critical' | 'high' | 'medium' | 'low' required

A human friendly version of the issue's importance

status'open' | 'ignored' | 'snoozed' | 'closed' required

The current status of the issue.

affected_packagestring

The name of affected open-source package, if any

affected_filestring

The name of affected file, if any

cve_idstring

The CVE ID when it is an open_source issue

cve_id_aliasstring

An alternative CVE ID when the issue is related to a AIKIDO CVE. This value will be 'null' if the issue is not related to a AIKIDO CVE.

first_detected_atinteger required

A timestamp indicating when the issue was first created

code_repo_idinteger

The id of the code repository where this issue was found

code_repo_namestring

The name of code repository where this issue was found

cloud_idinteger

The id of the cloud where this issue was found

cloud_namestring

The name of the cloud where this issue was found

container_repo_idinteger

The id of the container image where this issue was found

container_repo_namestring

The name of the container image where this issue was found

virtual_machine_idinteger

The id of the cloud instance where this issue was found

virtual_machine_namestring

The name of the cloud instance where this issue was found

domain_idinteger

The id of the domain where this issue was found

domain_namestring

The name of the domain where this issue was found

sla_remediate_byinteger

An epoch timestamp in seconds by when this issue should be fixed following the configured SLA for this severity

ignored_atinteger

A timestamp indicating when the issue was ignored. This value will be 'null' if it is not ignored.

closed_atinteger

A timestamp indicating when the issue was closed. This value will be 'null' if it is not closed.

issue_type_metadataobject

An object containing additional information about the issue by the issue type. This value will not always be set.

reachability_status'unknown' | 'reachable' | 'not_reachable'

The current status of the issue group.

snooze_untilinteger

A timestamp indicating until when the issue will be snoozed. This value will be 'null' if the issue is not snoozed.

snooze_reasonstring

The reason why the issue is snoozed.

epssstring

String representing the EPSS score when include_epss_score is set to true. Value is null when there is no EPSS score available.

programming_languagestring

The programming language related to this issue.

Example response

[
  {
    "id": 1,
    "group_id": 1,
    "attack_surface": "backend",
    "status": "open",
    "severity": "critical",
    "severity_score": 90,
    "cve_id": "AIKIDO-2020-123",
    "cve_id_alias": "CVE-2020-7598",
    "type": "open_source",
    "rule": "SQL injection",
    "affected_package": "minimist",
    "affected_file": "index.php",
    "first_detected_at": 1700489005,
    "code_repo_name": "test-service",
    "code_repo_id": 1,
    "container_repo_id": 1,
    "container_repo_name": "aikido/test-service",
    "domain_id": 4,
    "domain_name": "https://aikido.dev",
    "virtual_machine_id": 13,
    "virtual_machine_name": "aikido-demo-env",
    "sla_remediate_by": 1700924603,
    "ignored_at": null,
    "closed_at": null,
    "reachability_status": "reachable",
    "issue_type_metadata": {
      "open_source": {
        "installed_version": "4.2.0",
        "patched_versions": [
          "4.2.6"
        ]
      },
      "sast": {
        "start_line": 69,
        "end_line": 73
      },
      "leaked_secret": {
        "commit": "nvr9onnag1veuupnever9onnal3tud0wn",
        "line": 10
      },
      "surface_monitoring": {
        "cve_id": "CVE-2025-3573",
        "package_name": "jquery-validation",
        "package_version": "1.19.5",
        "domain_target_url": "https://aikido.dev/api/routeTest",
        "evidence": null,
        "evidence_description": null
      }
    },
    "snooze_until": null,
    "snooze_reason": "",
    "ignore_reasons": [
      {
        "kind": "manual_ignore",
        "reason": "Marked as false positive"
      },
      {
        "kind": "auto_ignore",
        "reason": "Dependency not used in production"
      },
      {
        "kind": "rule_ignore",
        "reason": "Path starts with examples/ in repo-1"
      },
      {
        "kind": "api_ignore",
        "reason": "Ignored via API"
      }
    ],
    "programming_language": "JS"
  }
]