DocumentationAPI Reference
Vulnerability findings

List vulnerable firmware versions

GET
/workspaces/{workspaceId}/vulnerable-firmware-versions

Authorization

API key Vulnerabilities: read
AuthorizationBearer <token>

API key (sf_...) with any of the required scopes. Generate it in the Spotflow portal on the settings page.

In: header

Scope: Vulnerabilities: read

Path Parameters

workspaceId*string
Formatuuid

Response Body

application/json

curl -X GET "https://example.com/workspaces/00000000-0000-0000-0000-000000000001/vulnerable-firmware-versions"

Firmware versions with at least one active vulnerability finding.

[  {    "firmwareId": "q8Fd53pLn1Yr",    "firmwareName": "Thermostat application",    "firmwareVersionId": "r2Kt75mXc8Vd",    "firmwareVersionName": "2.4.1",    "createdAt": "2026-01-10T15:30:00+00:00",    "vulnerabilitySummary": {      "totalActiveIssues": 3,      "countsBySeverity": [        {          "severity": "Critical",          "count": 1        },        {          "severity": "High",          "count": 2        }      ],      "affectedDeviceCount": 218,      "lastEvaluatedAt": "2026-01-12T02:00:00+00:00"    }  }]