---
title: "List vulnerability remediations that are in scope for this audit"
method: GET
path: "/audits/{auditId}/vulnerability-remediations"
tags: ["Audits"]
deprecated: true
---

# List vulnerability remediations that are in scope for this audit

`GET /audits/{auditId}/vulnerability-remediations`

> **Deprecated.**

List all vulnerability remediations based on selected filters that are in scope for this audit.

End of life — this endpoint works for classic audits only; it does not support
controlled audit view. It remains available for existing classic audits but will be removed once
classic audits are fully phased out, so do not build new integrations on it.

Rate limit: 10 requests / minute.

## Path parameters

- `auditId` string, required

## Query parameters

- `pageSize` integer — Controls the maximum number of items returned in one response from the API.
- `pageCursor` string — A marker or pointer, telling the API where to start fetching items for the subsequent page in a paginated dataset. Note that the requested page will not include the item that corresponds to this cursor but will start from the one immediately after this cursor.
- `integrationId` string
- `severity` 'CRITICAL' | 'HIGH' | 'LOW' | 'MEDIUM' — ExternalFindingSeverity describes the severity of an external finding (Vulnerability or Security Alert)
- `isRemediatedOnTime` boolean
- `remediatedAfterDate` string, date-time
- `remediatedBeforeDate` string, date-time

## Response `200`

Ok

- PaginatedResponseVulnerabilityRemediation
  - `results` object, required
    - `data` VulnerabilityRemediation[], required
      - `id` string, required — Unique identifier for the remediation.
      - `vulnerabilityId` string, required — Unique identifier for the vulnerability that the remediation is for.
      - `vulnerableAssetId` string, required — Unique identifier for the vulnerable asset that the remediation is for.
      - `severity` string, required — Severity of the vulnerability.
      - `detectedDate` string, date-time, nullable, required — Date when the vulnerability was first detected.
      - `slaDeadlineDate` string, date-time, nullable, required — Date when the vulnerability should be remediated by.
      - `remediationDate` string, date-time, nullable, required — Date when the vulnerability was remediated.
    - `pageInfo` PageInfo, required — Provides information about the pagination of a dataset.
      - `endCursor` string, nullable, required — The cursor that points to the end of the current page, or null if there is no such cursor.
      - `hasNextPage` boolean, required — Indicates if there is another page after the current page.
      - `hasPreviousPage` boolean, required — Indicates if there is a page before the current page.
      - `startCursor` string, nullable, required — The cursor that points to the start of the current page, or null if there is no such cursor.

---

[API](https://skmtc.net/vanta/apis/build-integrations.md) · [All operations](https://skmtc.net/vanta/apis/build-integrations/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vanta/build-integrations/revisions/6c1f7590538b/schema)