---
title: "Create a new comment related to a security advisory (vulnerability)"
method: POST
path: "/comment/"
tags: ["comment"]
---

# Create a new comment related to a security advisory (vulnerability)

`POST /comment/`

Create a comment related to a security advisory.

## Headers

- `X-Fields` string, mask

## Request body

- Comment
  - `uuid` string — Comment uuid.
  - `vulnerability_lookup_origin` string — UUID of the Vulnerability-Lookup origin instance.
  - `title` string — Comment title.
  - `description` string — Description.
  - `description_format` string — Description format (markdown or text).
  - `vulnerability` string — Vulnerability id.
  - `creation_timestamp` string, date-time — Creation time of the comment.
  - `timestamp` string, date-time — Updated time of the comment.
  - `related_vulnerabilities` string[] — One or more vulnerability references (CVE ID, GHSA-ID, PYSEC ID, etc.) for this comment.
  - `meta` object — Zero or more meta-fields.
  - `author` User
    - `login` string — Login of the user.

## Response `201`

Success.

- CommentsList[]
  - `metadata` Metadata
    - `count` integer — Total number of the items of the data.
    - `page` integer — Number of the page.
    - `per_page` integer — Requested limit data.
  - `data` Comment[] — List of comments.
    - `uuid` string — Comment uuid.
    - `vulnerability_lookup_origin` string — UUID of the Vulnerability-Lookup origin instance.
    - `title` string — Comment title.
    - `description` string — Description.
    - `description_format` string — Description format (markdown or text).
    - `vulnerability` string — Vulnerability id.
    - `creation_timestamp` string, date-time — Creation time of the comment.
    - `timestamp` string, date-time — Updated time of the comment.
    - `related_vulnerabilities` string[] — One or more vulnerability references (CVE ID, GHSA-ID, PYSEC ID, etc.) for this comment.
    - `meta` object — Zero or more meta-fields.
    - `author` User
      - `login` string — Login of the user.

## Other responses

- `400` — JSON validation failed or incorrect payload to instantiate a comment.
- `403` — Commenter permission required or not the author of the comment.

---

[API](https://skmtc.net/vulnerability-lookup/apis/vulnerability-lookup-api.md) · [All operations](https://skmtc.net/vulnerability-lookup/apis/vulnerability-lookup-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vulnerability-lookup/vulnerability-lookup-api/versions/e6ef25beb687/schema)