---
title: "Get list of the latest CVEs"
method: GET
path: "/cves"
tags: ["cves"]
---

# Get list of the latest CVEs

`GET /cves`

## Query parameters

- `offset` integer
- `limit` integer
- `status` CVEStatus[]
- `min_score` number
- `min_packages_count` integer
- `q` string
- `sort` string[]

## Response `200`

get latest CVEs

- object
  - `total_count` number
  - `items` CVE[]
    - `id` string
    - `description` string — Text description of the vulnerability from the database
    - `score` number — Maximum score of the CVE
    - `cvssv2_score` number — CVSSv2 score of the CVE
    - `cvssv3_score` number — CVSSv3 score of the CVE
    - `curated` boolean — Indicates whether CVE has curated status
    - `packages_count` number — Number of associated packages with this CVE
    - `packages` object[] — optionals
      - `channel_name` string
      - `parent_channel_name` string
      - `cve_status` 'reported' | 'active' | 'mitigated' | 'cleared' | 'disputed' | 'unknown'
      - `artifact_family` 'anaconda_project' | 'anaconda_env' | 'cve' | 'conda' | 'python' | 'cran' | 'notebook' | 'docker' | 'sbom'
      - `artifact_type` string
      - `ckey` string
      - `common_name` string
      - `blob_sha256` string
      - `blob_size` string
    - `published_at` string — date when the CVE has been published in NVD
    - `nvd_modified_at` string — latest date when the CVE was updated in NVD
    - `anaconda_modified_at` string — latest date when the CVE was curated by Anaconda
    - `cvssv2` object
      - `cvssV2` object
        - `version` string
        - `vectorString` string
        - `accessComplexity` string
        - `accessVector` string
        - `authentication` string
        - `availabilityImpact` string
        - `baseScore` string
        - `confidentialityImpact` string
        - `integrityImpact` string
      - `exploitabilityScore` number
      - `impactScore` number
      - `severity` string
      - `obtainAllPrivilege` boolean
      - `obtainOtherPrivilege` boolean
      - `obtainUserPrivilege` boolean
      - `userInteractionRequired` boolean
    - `cvssv3` object
      - `cvssV3` object
        - `attackComplexity` string
        - `attackVector` string
        - `availabilityImpact` string
        - `baseScore` string
        - `baseSeverity` string
        - `confidentialityImpact` string
        - `integrityImpact` string
        - `privilegesRequired` string
        - `scope` string
        - `userInteraction` string
        - `vectorString` string
        - `version` string
      - `exploitabilityScore` number
      - `impactScore` number
    - `nvdv2` object
    - `reviews` object[]
    - `cwes` string[]

## Other responses

- `401` — Unauthenticated, no token is provided or token is invalid
- `403` — Access is forbidden
- `500` — Internal server error

---

[API](https://skmtc.net/anaconda/apis/anaconda-server-api.md) · [All operations](https://skmtc.net/anaconda/apis/anaconda-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/anaconda/anaconda-server-api/versions/6aef0cb7a151/schema)