---
title: "POST request to resolve vulnerable symbols"
method: POST
path: "/api/v2/static-analysis-sca/vulnerabilities/resolve-vulnerable-symbols"
tags: ["Static Analysis"]
---

# POST request to resolve vulnerable symbols

`POST /api/v2/static-analysis-sca/vulnerabilities/resolve-vulnerable-symbols`

## Request body

- ResolveVulnerableSymbolsRequest — The top-level request object for resolving vulnerable symbols in a set of packages.
  - `data` ResolveVulnerableSymbolsRequestData — The data object in a request to resolve vulnerable symbols, containing the package PURLs and request type.
    - `attributes` ResolveVulnerableSymbolsRequestDataAttributes — The attributes of a request to resolve vulnerable symbols, containing the list of package PURLs to check.
      - `purls` string[] — The list of Package URLs (PURLs) for which to resolve vulnerable symbols.
    - `id` string — An optional identifier for this request data object.
    - `type` 'resolve-vulnerable-symbols-request', required — The type identifier for requests to resolve vulnerable symbols.

## Response `200`

OK

- ResolveVulnerableSymbolsResponse — The top-level response object returned when resolving vulnerable symbols for a set of packages.
  - `data` ResolveVulnerableSymbolsResponseData — The data object in a response for resolving vulnerable symbols, containing the result attributes and response type.
    - `attributes` ResolveVulnerableSymbolsResponseDataAttributes — The attributes of a response containing resolved vulnerable symbols, organized by package.
      - `results` ResolveVulnerableSymbolsResponseResults[] — The list of resolved vulnerable symbol results, one entry per queried package.
        - `purl` string — The Package URL (PURL) uniquely identifying the package for which vulnerable symbols are resolved.
        - `vulnerable_symbols` ResolveVulnerableSymbolsResponseResultsVulnerableSymbols[] — The list of vulnerable symbol groups found in this package, organized by advisory.
          - `advisory_id` string — The identifier of the security advisory that describes the vulnerability.
          - `symbols` ResolveVulnerableSymbolsResponseResultsVulnerableSymbolsSymbols[] — The list of symbols that are vulnerable according to this advisory.
            - `name` string — The name of the vulnerable symbol.
            - `type` string — The type classification of the vulnerable symbol (e.g., function, class, variable).
            - `value` string — The value or identifier associated with the vulnerable symbol.
    - `id` string — The unique identifier for this response data object.
    - `type` 'resolve-vulnerable-symbols-response', required — The type identifier for responses containing resolved vulnerable symbols.

## Other responses

- `429` — Too many requests

---

[API](https://skmtc.net/datadog/apis/api-v2.md) · [All operations](https://skmtc.net/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/datadog/api-v2/revisions/da68bf029e4c/schema)