Skip to content
Updawg

`GET /v1/orgs/{org}/advisories` (DAWG-288).

GET
/v1/orgs/{org}/advisories
curl --request GET \
  --url https://api.updawg.net/v1/orgs/example/advisories

Parameters

Section titled “Parameters”

Path Parameters

Section titled “Path Parameters”
org
required
string

Organization slug.

Query Parameters

Section titled “Query Parameters”
severity
Array<string>

Repeatable: none, low, medium, high, critical, or unrated for those nobody rated.

known_exploited
boolean

true: only advisories with a CVE in CISA’s Known Exploited Vulnerabilities.

unfixable
boolean

true: only advisories some exposed host has no available fix for.

Responses

Section titled “Responses”

200

Section titled “200”

Every advisory affecting at least one host, known-exploited first, then worst, then widest.

Media typeapplication/json
object
advisories
required
Array<object>
object
cves
required
Array<string>
external_id
required

USN-7012-1, DSA-6335-1, RLSA-2026:67165, …

string
first_seen_at
required

When the earliest of those exposures was first seen.

string format: date-time
fixable_hosts
required

Of those, the ones an available update fixes.

integer format: int64
hosts
required

Hosts with an installed version it affects.

integer format: int64
id
required
string
known_exploited
required

A CVE it lists is in CISA’s Known Exploited Vulnerabilities.

boolean
severity

Normalised, from the vendor’s rating or else the worst CVSS. null means nobody rated it, which is not the same as harmless.

string | null
source
required
string
title
required
string
url
string | null
total
required
integer
Examplegenerated
{
  "advisories": [
    {
      "cves": [
        "example"
      ],
      "external_id": "example",
      "first_seen_at": "2026-04-15T12:00:00Z",
      "fixable_hosts": 1,
      "hosts": 1,
      "id": "example",
      "known_exploited": true,
      "severity": "example",
      "source": "example",
      "title": "example",
      "url": "example"
    }
  ],
  "total": 1
}

400

Section titled “400”

A filter that cannot be honoured.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

401

Section titled “401”

No session.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

403

Section titled “403”

Not permitted.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

404

Section titled “404”

No such organization, or not yours.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

429

Section titled “429”

Over the organization’s request limit. Retry-After says when to try again; RateLimit-Limit is the burst.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}