---
title: "Get list of the CVEs with status for provided list of packages"
method: GET
path: "/cves-report"
tags: ["cves"]
---

# Get list of the CVEs with status for provided list of packages

`GET /cves-report`

## Query parameters

- `sha256s` string[]
- `use_blob` boolean

## Response `200`

get CVE status for packages

- object
  - `items` CVEsReport[]
    - `sha256` string
    - `cves` object[]
      - `id` string
      - `score` number — Maximum score of the CVE
      - `status` string — CVE status
      - `curated` boolean — Indicates whether CVE has curated status
      - `published_at` string — date when the CVE has been published in NVD
      - `nvd_modified_at` string — latest date when the CVE was updated in NVD
      - `anaconda_modified_at` string — latest date when the CVE was curated by Anaconda

## Other responses

- `401` — Unauthenticated, no token is provided or token is invalid
- `403` — Access is forbidden
- `500` — Internal server error

---

[API](https://skmtc.net/anaconda/apis/anaconda-server-api.md) · [All operations](https://skmtc.net/anaconda/apis/anaconda-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/anaconda/anaconda-server-api/revisions/6aef0cb7a151/schema)