Chief Tools Logo
Server Chief API v1
Server Chief API v1

Vulnerabilities

Download schema

Endpoints for finding which servers security advisories affect, and the advisories themselves.

Search vulnerabilities

GET
https://server.chief.app/api/v1
/vulnerabilities
OpenID Connect
or
Bearer (ctp_*)
or
Bearer (ctt_*)

Find vulnerabilities across the servers the authenticated team can see, including servers shared with it: which servers a CVE or advisory affects, which have critical vulnerabilities, or which can be fixed by installing pending updates. Every result includes its server, one entry per server, CVE (or advisory without a CVE) and source package.

Search vulnerabilities › query Parameters

cve
​string | null · maxLength: 64 · pattern: ^[A-Za-z][A-Za-z0-9]…

Only return vulnerabilities covered by this CVE or advisory: a CVE ID, or an advisory ID or alias such as DSA-5532-1, USN-6500-1, ALSA-2024:1234 or DEBIAN-CVE-2023-5363.

severity
​string | null · enum

Only return vulnerabilities of this severity or worse. Unknown only matches unrated vulnerabilities.

Enum values:
critical
high
medium
low
negligible
unknown
fix_status
​string | null · enum

Only return vulnerabilities with this fix status.

Enum values:
available
reboot
released
none
known_exploited
​boolean | null

Only return vulnerabilities CISA lists as known exploited (true), or those it does not list (false).

public_exploit
​boolean | null

Only return vulnerabilities Metasploit, Nuclei or Exploit-DB has a public exploit of (true), or those without one (false).

min_epss
​number | null · min: 0 · max: 1

Only return vulnerabilities with at least this EPSS score, the probability of exploitation activity in the next 30 days.

package
​string | null · maxLength: 255

Only return vulnerabilities of this source package, or of the source of this binary package.

status
​string | null · enum

open for current vulnerabilities, resolved for vulnerabilities that were fixed or no longer apply, all for both.

Enum values:
open
resolved
all
Default: open
per_page
​integer · min: 1 · max: 100
page
​integer · min: 1
advisory
​string | null · maxLength: 64 · pattern: ^[A-Za-z][A-Za-z0-9]…

Only return vulnerabilities covered by this advisory, by ID or alias. Combines with cve.

Search vulnerabilities › Responses

Array of ServerVulnerability

​ServerVulnerability[] · required

Show an advisory

GET
https://server.chief.app/api/v1
/advisories/{advisory}
OpenID Connect
or
Bearer (ctp_*)
or
Bearer (ctt_*)

Show a security advisory by its OSV ID, such as DSA-5532-1, DEBIAN-CVE-2023-5363, USN-6450-1, UBUNTU-CVE-2023-5363, ALSA-2024:0025 or RLSA-2024:0003, with the fixed versions per release. Only advisories for the releases Server Chief imports are available. Find the servers a CVE affects with the vulnerabilities search instead.

Show an advisory › path Parameters

advisory
​string · required

Show an advisory › Responses

Advisory

​Advisory · required
ApplicationsMetrics