---
title: "Get all the CVE's associated with this channel"
method: GET
path: "/channels/{channel_name}/cves"
tags: ["channels", "cves"]
---

# Get all the CVE's associated with this channel

`GET /channels/{channel_name}/cves`

## Path parameters

- `channel_name` string, required

## Query parameters

- `offset` integer
- `limit` integer
- `status` CVEStatus[]
- `min_score` number
- `q` string
- `max_score` number
- `architectures` string[]
- `cve_name` string
- `version` string
- `min_packages_count` integer
- `artifact` string
- `sort` string[]
- `with_cve_counts_by_severity` boolean

## Response `200`

successfully returns the CVE objects related to this channel

- object
  - `total_count` number
  - `items` CVE[]
    - `id` string
    - `description` string — Text description of the vulnerability from the database
    - `score` number — Maximum score of the CVE
    - `cvssv2_score` number — CVSSv2 score of the CVE
    - `cvssv3_score` number — CVSSv3 score of the CVE
    - `curated` boolean — Indicates whether CVE has curated status
    - `packages_count` number — Number of associated packages with this CVE
    - `packages` object[] — optionals
      - `channel_name` string
      - `parent_channel_name` string
      - `cve_status` 'reported' | 'active' | 'mitigated' | 'cleared' | 'disputed' | 'unknown'
      - `artifact_family` 'anaconda_project' | 'anaconda_env' | 'cve' | 'conda' | 'python' | 'cran' | 'notebook' | 'docker' | 'sbom'
      - `artifact_type` string
      - `ckey` string
      - `common_name` string
      - `blob_sha256` string
      - `blob_size` string
    - `published_at` string — date when the CVE has been published in NVD
    - `nvd_modified_at` string — latest date when the CVE was updated in NVD
    - `anaconda_modified_at` string — latest date when the CVE was curated by Anaconda
    - `cvssv2` object
      - `cvssV2` object
        - `version` string
        - `vectorString` string
        - `accessComplexity` string
        - `accessVector` string
        - `authentication` string
        - `availabilityImpact` string
        - `baseScore` string
        - `confidentialityImpact` string
        - `integrityImpact` string
      - `exploitabilityScore` number
      - `impactScore` number
      - `severity` string
      - `obtainAllPrivilege` boolean
      - `obtainOtherPrivilege` boolean
      - `obtainUserPrivilege` boolean
      - `userInteractionRequired` boolean
    - `cvssv3` object
      - `cvssV3` object
        - `attackComplexity` string
        - `attackVector` string
        - `availabilityImpact` string
        - `baseScore` string
        - `baseSeverity` string
        - `confidentialityImpact` string
        - `integrityImpact` string
        - `privilegesRequired` string
        - `scope` string
        - `userInteraction` string
        - `vectorString` string
        - `version` string
      - `exploitabilityScore` number
      - `impactScore` number
    - `nvdv2` object
    - `reviews` object[]
    - `cwes` string[]
  - `cve_count_by_severity` CVEsBySeverity — CVE counts grouped by severity based on NVD classification
    - `critical` integer
    - `high` integer
    - `medium` integer
    - `low` integer
    - `none` integer

## Other responses

- `400` — Server cannot execute request due to something that is perceived to be a client error
- `401` — Unauthenticated, no token is provided or token is invalid
- `403` — Access is forbidden
- `500` — Internal server error

---

[API](https://skmtc.net/anaconda/apis/anaconda-server-api.md) · [All operations](https://skmtc.net/anaconda/apis/anaconda-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/anaconda/anaconda-server-api/versions/6aef0cb7a151/schema)