---
title: "Get session vulnerabilities"
method: GET
path: "/session/{sessionID}/vulnerability"
---

# Get session vulnerabilities

`GET /session/{sessionID}/vulnerability`

Retrieve the list of vulnerabilities reported for a specific session.

## Path parameters

- `sessionID` string, required

## Query parameters

- `directory` string

## Response `200`

Vulnerability list

- Vulnerability[]
  - `id` string
  - `severity` 'critical' | 'high' | 'medium' | 'low' | 'info', required
  - `title` string, required
  - `description` string, required
  - `cwe_id` string
  - `file` string
  - `line_start` integer
  - `line_end` integer
  - `steps_to_reproduce` string
  - `business_impact` string
  - `recommendation` string
  - `poc` string
  - `endpoint` string
  - `attack_vector` string
  - `status` 'new' | 'approved' | 'duplicate' | 'open' | 'fixed' | 'ignored'
  - `candidate` 'critical' | 'high' | 'medium' | 'low' | 'info'
  - `duplicate_of` string
  - `message_id` string
  - `time` object
    - `created` number, required
    - `updated` number, required

## Other responses

- `400` — Bad request
- `404` — Not found

---

[API](https://skmtc.net/cyberstrikeus/apis/cyberstrike.md) · [All operations](https://skmtc.net/cyberstrikeus/apis/cyberstrike/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cyberstrikeus/cyberstrike/versions/4e11f1aed2fd/schema)