apicheats.dev github/llms.txt Raw .md
GET

GET /advisories — GitHub API

GitHub token (required); https://api.github.com

GitHub API

List global security advisories

Base URL
https://api.github.com
Auth
Authorization: Bearer <GITHUB_API_KEY>
Last verified
2026-10-20 · upstream hash matched
Actions Try in browser→
Agents: curl -H "Accept: text/markdown" this URL
→ 371 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X GET 'https://api.github.com/advisories?ghsa_id=ghsa-id&type=reviewed&cve_id=cve-id&ecosystem=rubygems&severity=unknown&cwes=example-cwes&is_withdrawn=true&affects=example-affects&published=example-published&updated=example-updated&modified=example-modified&epss_percentage=example-epss-percentage&epss_percentile=example-epss-percentile&before=example-before&after=example-after&direction=desc&per_page=30&sort=published' \  -H "Authorization: Bearer $GITHUB_TOKEN" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10'

Parameters

Name In Type Required Description
ghsa_id query string No If specified, only advisories with this GHSA (GitHub Security Advisory) identifier will be returned.
type query string No If specified, only advisories of this type will be returned. By default, a request with no other parameters defined will only return reviewed advisories that are not malware.
cve_id query string No If specified, only advisories with this CVE (Common Vulnerabilities and Exposures) identifier will be returned.
ecosystem query string No If specified, only advisories for these ecosystems will be returned.
severity query string No If specified, only advisories with these severities will be returned.
cwes query string No If specified, only advisories with these Common Weakness Enumerations (CWEs) will be returned. Example: `cwes=79,284,22` or `cwes[]=79&cwes[]=284&cwes[]=22`
is_withdrawn query boolean No Whether to only return advisories that have been withdrawn.
affects query string No If specified, only return advisories that affect any of `package` or `package@version`. A maximum of 1000 packages can be specified. If the query parameter causes the URL to exceed the maximum URL length supported by your client, you must specify fewer packages. Example: `affects=package1,[email protected],[email protected]` or `affects[]=package1&affects[][email protected]`
published query string No If specified, only return advisories that were published on a date or date range. For more information on the syntax of the date range, see "[Understanding the search syntax](https://docs.github.com/search-github/getting-started-with-searching-on-github/understanding-the-search-syntax#query-for-dates)."
updated query string No If specified, only return advisories that were updated on a date or date range. For more information on the syntax of the date range, see "[Understanding the search syntax](https://docs.github.com/search-github/getting-started-with-searching-on-github/understanding-the-search-syntax#query-for-dates)."
modified query string No If specified, only show advisories that were updated or published on a date or date range. For more information on the syntax of the date range, see "[Understanding the search syntax](https://docs.github.com/search-github/getting-started-with-searching-on-github/understanding-the-search-syntax#query-for-dates)."
epss_percentage query string No If specified, only return advisories that have an EPSS percentage score that matches the provided value. The EPSS percentage represents the likelihood of a CVE being exploited.
epss_percentile query string No If specified, only return advisories that have an EPSS percentile score that matches the provided value. The EPSS percentile represents the relative rank of the CVE's likelihood of being exploited compared to other CVEs.
before query string No A cursor, as given in the [Link header](https://docs.github.com/rest/guides/using-pagination-in-the-rest-api#using-link-headers). If specified, the query only searches for results before this cursor. For more information, see "[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api)."
after query string No A cursor, as given in the [Link header](https://docs.github.com/rest/guides/using-pagination-in-the-rest-api#using-link-headers). If specified, the query only searches for results after this cursor. For more information, see "[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api)."
direction query string No The direction to sort the results by.
per_page query integer No The number of results per page (max 100). For more information, see "[Using pagination in the REST API](https://docs.github.com/rest/using-the-rest-api/using-pagination-in-the-rest-api)."
sort query string No The property to sort the results by.

Response 200 OK

[
  {
    "ghsa_id": "string",
    "cve_id": "string",
    "url": "string",
    "html_url": "https://example.com",
    "repository_advisory_url": "https://example.com",
    "summary": "string",
    "description": "string",
    "type": "reviewed",
    "severity": "critical",
    "source_code_location": "https://example.com",
    "identifiers": [
      {
        "type": "CVE",
        "value": "string"
      }
    ],
    "references": [
      "string"
    ],
    "published_at": "2026-09-03T00:00:00Z",
    "updated_at": "2026-09-03T00:00:00Z",
    "github_reviewed_at": "2026-09-03T00:00:00Z",
    "nvd_published_at": "2026-09-03T00:00:00Z",
    "withdrawn_at": "2026-09-03T00:00:00Z",
    "vulnerabilities": [
      {
        "package": {
          "ecosystem": "rubygems",
          "name": "string"
        },
        "vulnerable_version_range": "string",
        "first_patched_version": "string",
        "vulnerable_functions": [
          "string"
        ]
      }
    ],
    "cvss_severities": {
      "cvss_v3": {
        "vector_string": "string",
        "score": 0
      },
      "cvss_v4": {
        "vector_string": "string",
        "score": 0
      }
    },
    "epss": {
      "percentage": 0,
      "percentile": 0
    },
    "cwes": [
      {
        "cwe_id": "string",
        "name": "string"
      }
    ],
    "credits": [
      {
        "user": {
          "name": "string",
          "email": "string",
          "login": "octocat",
          "id": 1,
          "node_id": "MDQ6VXNlcjE=",
          "avatar_url": "https://github.com/images/error/octocat_happy.gif",
          "gravatar_id": "41d064eb2195891e12d0413f63227ea7",
          "url": "https://api.github.com/users/octocat",
          "html_url": "https://github.com/octocat",
          "followers_url": "https://api.github.com/users/octocat/followers",
          "following_url": "https://api.github.com/users/octocat/following{/other_user}",
          "gists_url": "https://api.github.com/users/octocat/gists{/gist_id}",
          "starred_url": "https://api.github.com/users/octocat/starred{/owner}{/repo}",
          "subscriptions_url": "https://api.github.com/users/octocat/subscriptions",
          "organizations_url": "https://api.github.com/users/octocat/orgs",
          "repos_url": "https://api.github.com/users/octocat/repos",
          "events_url": "https://api.github.com/users/octocat/events{/privacy}",
          "received_events_url": "https://api.github.com/users/octocat/received_events",
          "type": "User",
          "site_admin": true,
          "starred_at": "\"2020-07-09T00:17:55Z\"",
          "user_view_type": "public"
        },
        "type": "analyst"
      }
    ]
  }
]
Get a free GitHub API key → sponsored

Affiliate link - we may earn a commission, at no extra cost to you.