List all vulnerabilities with domain filtering

GET https://app.cyrion.ai/api/vulnerabilities

List all vulnerabilities across all scans with optional domain filtering.

Domain access is restricted based on subscription tier:

  • Free and Lite: web vulnerabilities
  • Hacker: web + mobile vulnerabilities
  • Red Team and Enterprise: web + mobile + cloud vulnerabilities

If a domain is requested that the user doesn't have access to, a 403 error is returned with upgrade information.

Results are cached for 10 minutes.

Query parameters

  • domain (string): Filter by vulnerability domain (web, mobile, cloud). If not specified, returns all accessible domains.
  • severity (string): Filter by severity (critical, high, medium, low, info)
  • status (string): Filter by status (new, confirmed, false_positive, fixed, accepted_risk)
  • limit (integer): Maximum number of vulnerabilities to return
  • offset (integer): Number of vulnerabilities to skip

Responses

  • 200 Successful Response
  • 422 Validation Error