curl --request GET \
--url http://api.scanoss.com/v2/vulnerabilities/componentimport requests
url = "http://api.scanoss.com/v2/vulnerabilities/component"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('http://api.scanoss.com/v2/vulnerabilities/component', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "http://api.scanoss.com/v2/vulnerabilities/component",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "http://api.scanoss.com/v2/vulnerabilities/component"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("http://api.scanoss.com/v2/vulnerabilities/component")
.asString();require 'uri'
require 'net/http'
url = URI("http://api.scanoss.com/v2/vulnerabilities/component")
http = Net::HTTP.new(url.host, url.port)
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_body{
"component": {
"purl": "pkg:github/scanoss/engine",
"requirement": "=>1.0.0",
"version": "1.0.0",
"vulnerabilities": [
{
"id": "CVE-1999-0214",
"cve": "CVE-1999-0214",
"url": "https://nvd.nist.gov/vuln/detail/CVE-1999-0214",
"summary": "Denial of service by sending forged ICMP unreachable packets",
"severity": "High",
"published": "1992-07-21",
"modified": "2025-04-02",
"source": "NVD",
"cvss": [
{
"cvss": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cvss_score": 7.5,
"cvss_severity": "High"
}
],
"epss": {
"probability": 0.00483,
"percentile": 0.64405
}
}
]
},
"status": {
"status": "SUCCESS",
"message": "Vulnerabilities Successfully retrieved"
}
}"<string>"{
"code": 123,
"message": "<string>",
"details": [
{
"@type": "<string>"
}
]
}Get vulnerability information for a single software component.
Analyzes the component and returns known vulnerabilities including CVE details, severity scores, publication dates, and other security metadata. Vulnerability data is sourced from various security databases and feeds.
curl --request GET \
--url http://api.scanoss.com/v2/vulnerabilities/componentimport requests
url = "http://api.scanoss.com/v2/vulnerabilities/component"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('http://api.scanoss.com/v2/vulnerabilities/component', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "http://api.scanoss.com/v2/vulnerabilities/component",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "http://api.scanoss.com/v2/vulnerabilities/component"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("http://api.scanoss.com/v2/vulnerabilities/component")
.asString();require 'uri'
require 'net/http'
url = URI("http://api.scanoss.com/v2/vulnerabilities/component")
http = Net::HTTP.new(url.host, url.port)
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_body{
"component": {
"purl": "pkg:github/scanoss/engine",
"requirement": "=>1.0.0",
"version": "1.0.0",
"vulnerabilities": [
{
"id": "CVE-1999-0214",
"cve": "CVE-1999-0214",
"url": "https://nvd.nist.gov/vuln/detail/CVE-1999-0214",
"summary": "Denial of service by sending forged ICMP unreachable packets",
"severity": "High",
"published": "1992-07-21",
"modified": "2025-04-02",
"source": "NVD",
"cvss": [
{
"cvss": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cvss_score": 7.5,
"cvss_severity": "High"
}
],
"epss": {
"probability": 0.00483,
"percentile": 0.64405
}
}
]
},
"status": {
"status": "SUCCESS",
"message": "Vulnerabilities Successfully retrieved"
}
}"<string>"{
"code": 123,
"message": "<string>",
"details": [
{
"@type": "<string>"
}
]
}Query Parameters
Package URL identifying the component to analyze.
Version constraint for component resolution when PURL lacks explicit version.
Response
A successful response.
Success example. For error cases, the component block reports the processing status via info_message and info_code. Example: {"component":{"purl":"pkg:github/unknown/component","requirement":"","version":"","vulnerabilities":[],"info_message":"Component not found in database","info_code":"COMPONENT_NOT_FOUND"},"status":{"status":"SUCCESS","message":"Request processed"}}
Vulnerability information for a specific component identified by PURL and version.
Contains comprehensive vulnerability details including CVE information, severity scores, and security metadata for software components.
Show child attributes
Show child attributes
Detailed response details.
Show child attributes
Show child attributes