Get vulnerability finding

Authorization

API key Vulnerabilities: read

AuthorizationBearer <token>

API key (sf_...) with any of the required scopes. Generate it in the Spotflow portal on the settings page.

In: header

Scope: Vulnerabilities: read

Path Parameters

workspaceId*string

Formatuuid

findingId*string

Response Body

`application/json`

`application/problem+json`

curl -X GET "https://example.com/workspaces/00000000-0000-0000-0000-000000000001/vulnerability-findings/b8Qr47xVm1Zj"

Vulnerability finding detail.

{  "id": "b8Qr47xVm1Zj",  "assessment": "InTriage",  "ignored": false,  "isKnownCisaExploit": false,  "component": {    "name": "mbedtls",    "version": "3.5.2",    "cpe": "cpe:2.3:a:arm:mbed_tls:3.5.2:*:*:*:*:*:*:*",    "purl": "pkg:generic/mbedtls@3.5.2",    "vendor": "ARM"  },  "cve": {    "id": "CVE-2025-12345",    "source": "NVD",    "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2025-12345",    "description": "A buffer overflow in the TLS handshake parser allows a remote attacker to crash the device.",    "status": "Analyzed",    "severity": "Critical",    "primaryBaseScore": 9.1,    "cvssScores": [      {        "version": "3.1",        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",        "baseScore": 9.1,        "baseSeverity": "CRITICAL",        "source": "nvd@nist.gov"      }    ],    "references": [      {        "url": "https://github.com/Mbed-TLS/mbedtls/security/advisories/example",        "source": "GitHub",        "tags": [          "Vendor Advisory"        ]      }    ],    "cwes": [      {        "id": "CWE-120",        "name": "Buffer Copy without Checking Size of Input"      }    ],    "publishedAt": "2025-12-18T10:00:00+00:00",    "modifiedAt": "2026-01-04T08:30:00+00:00"  },  "affectedPackages": [    {      "purl": "pkg:generic/mbedtls",      "packageName": "mbedtls",      "vendor": "ARM",      "versions": [        {          "cpe": "cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*",          "versionStartIncluding": "3.0.0",          "versionEndExcluding": "3.6.0"        }      ]    }  ],  "sboms": [    {      "sbomId": "z3Mp96lQd4Gt",      "fileName": "thermostat-application-2.4.1.spdx.json",      "pathsToRoot": [        [          "thermostat-application",          "mbedtls"        ]      ]    }  ],  "timeline": [    {      "type": "Published",      "timestamp": "2025-12-18T10:00:00+00:00"    },    {      "type": "Detected",      "timestamp": "2026-01-10T15:38:00+00:00"    },    {      "type": "Assessment",      "timestamp": "2026-01-11T09:15:00+00:00",      "source": "User",      "createdByEmail": "security@example.com",      "assessment": {        "assessment": "InTriage",        "detail": "Checking whether the affected code path is reachable."      }    }  ]}