> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ankra.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get the platform advisory page for one CVE (bearer twin)

> The parsed NVD/OSV advisory record for a CVE in one of three states (fetched, pending, missing - an error state carries the reason), the platform's CISA KEV / EPSS intelligence for it, and the organisation's own exposure. A CVE the platform has not read yet is reported pending and queued for the vulnerability_advisories loop, so callers poll until it is fetched or missing.



## OpenAPI

````yaml https://platform.ankra.app/openapi.json get /api/v1/org/security/advisories/{cve_id}
openapi: 3.1.0
info:
  title: FastAPI
  version: 0.1.0
servers:
  - url: https://platform.ankra.app
security: []
paths:
  /api/v1/org/security/advisories/{cve_id}:
    get:
      tags:
        - Security
        - cli
      summary: Get the platform advisory page for one CVE (bearer twin)
      description: >-
        The parsed NVD/OSV advisory record for a CVE in one of three states
        (fetched, pending, missing - an error state carries the reason), the
        platform's CISA KEV / EPSS intelligence for it, and the organisation's
        own exposure. A CVE the platform has not read yet is reported pending
        and queued for the vulnerability_advisories loop, so callers poll until
        it is fetched or missing.
      operationId: security_advisory_api_v1_org_security_get
      parameters:
        - in: header
          name: authorization
          required: false
          schema:
            anyOf:
              - type: string
              - type: 'null'
            title: Authorization
        - in: header
          name: x-ankra-organisation-id
          required: false
          schema:
            anyOf:
              - type: string
              - type: 'null'
            title: X-Ankra-Organisation-Id
        - in: path
          name: cve_id
          required: true
          schema:
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityAdvisoryResponse'
          description: Successful response
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityDetailError'
          description: Invalid CVE id
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityPermissionDenied'
          description: Unknown, expired, or revoked API token
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityPermissionDenied'
          description: Permission or CSRF denied
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityDetailError'
          description: Organization-scoped resource not found
        '422':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
          description: Request validation error
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityDetailError'
          description: Internal server error
components:
  schemas:
    SecurityAdvisoryResponse:
      description: >-
        The advisory page for one CVE. status is fetched (advisory present),
        pending (not read yet - queued, poll again), missing (neither NVD nor
        OSV holds a record) or error (a source could not be read; fetch_error
        says which).
      properties:
        advisory:
          anyOf:
            - $ref: '#/components/schemas/SecurityAdvisoryRecord'
            - type: 'null'
        cve_id:
          type: string
        fetch_error:
          anyOf:
            - type: string
            - type: 'null'
        fleet:
          $ref: '#/components/schemas/SecurityAdvisoryFleet'
        intelligence:
          $ref: '#/components/schemas/SecurityExploitIntelligence'
        intelligence_status:
          $ref: '#/components/schemas/SecurityIntelligenceStatus'
        last_attempt_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        requested_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        sources:
          $ref: '#/components/schemas/SecurityAdvisorySources'
        status:
          enum:
            - fetched
            - pending
            - missing
            - error
          type: string
      required:
        - cve_id
        - status
        - fetch_error
        - requested_at
        - last_attempt_at
        - sources
        - advisory
        - intelligence
        - intelligence_status
        - fleet
      type: object
    SecurityDetailError:
      properties:
        detail:
          type: string
      required:
        - detail
      type: object
    SecurityPermissionDenied:
      properties:
        detail:
          enum:
            - permission_denied
          type: string
        permission:
          type: string
        scope_type:
          type: string
      required:
        - detail
        - permission
        - scope_type
      type: object
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          title: Detail
          type: array
      title: HTTPValidationError
      type: object
    SecurityAdvisoryRecord:
      description: >-
        The parsed public advisory record, merged from NVD (authoritative) and
        OSV.
      properties:
        affected:
          items:
            $ref: '#/components/schemas/SecurityAdvisoryAffected'
          type: array
        aliases:
          items:
            type: string
          type: array
        cvss_score:
          anyOf:
            - type: number
            - type: 'null'
        cvss_severity:
          anyOf:
            - type: string
            - type: 'null'
        cvss_vector:
          anyOf:
            - type: string
            - type: 'null'
        cvss_version:
          anyOf:
            - type: string
            - type: 'null'
        cwe_ids:
          items:
            type: string
          type: array
        description:
          anyOf:
            - type: string
            - type: 'null'
        last_modified_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        metrics:
          items:
            $ref: '#/components/schemas/SecurityAdvisoryMetric'
          type: array
        published_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        references:
          items:
            $ref: '#/components/schemas/SecurityAdvisoryReference'
          type: array
        source_identifier:
          anyOf:
            - type: string
            - type: 'null'
        ssvc:
          anyOf:
            - $ref: '#/components/schemas/SecurityAdvisorySSVC'
            - type: 'null'
        title:
          anyOf:
            - type: string
            - type: 'null'
        vulnerability_status:
          anyOf:
            - type: string
            - type: 'null'
      required:
        - title
        - description
        - source_identifier
        - vulnerability_status
        - published_at
        - last_modified_at
        - cvss_score
        - cvss_severity
        - cvss_vector
        - cvss_version
        - metrics
        - cwe_ids
        - references
        - affected
        - aliases
        - ssvc
      type: object
    SecurityAdvisoryFleet:
      description: >-
        The organisation's current findings for the CVE (one per package) and
        the totals across them.
      properties:
        affected_clusters:
          type: integer
        affected_workloads:
          type: integer
        findings:
          items:
            $ref: '#/components/schemas/SecurityFindingSummary'
          type: array
        fixable_occurrences:
          type: integer
        occurrences:
          type: integer
      required:
        - findings
        - occurrences
        - fixable_occurrences
        - affected_clusters
        - affected_workloads
      type: object
    SecurityExploitIntelligence:
      description: CISA KEV and EPSS intelligence for one CVE.
      properties:
        known_exploited:
          type: boolean
        kev_date_added:
          anyOf:
            - type: string
            - type: 'null'
        kev_due_date:
          anyOf:
            - type: string
            - type: 'null'
        kev_ransomware_use:
          type: boolean
        epss_score:
          anyOf:
            - format: double
              type: number
            - type: 'null'
        epss_percentile:
          anyOf:
            - format: double
              type: number
            - type: 'null'
        kev_vendor_project:
          anyOf:
            - type: string
            - type: 'null'
        kev_product:
          anyOf:
            - type: string
            - type: 'null'
        kev_vulnerability_name:
          anyOf:
            - type: string
            - type: 'null'
        kev_required_action:
          anyOf:
            - type: string
            - type: 'null'
      required:
        - epss_percentile
        - epss_score
        - kev_date_added
        - kev_due_date
        - kev_product
        - kev_ransomware_use
        - kev_required_action
        - kev_vendor_project
        - kev_vulnerability_name
        - known_exploited
      type: object
    SecurityIntelligenceStatus:
      properties:
        epss_synced_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        kev_listed:
          type: integer
        kev_synced_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
      required:
        - kev_synced_at
        - epss_synced_at
        - kev_listed
      type: object
    SecurityAdvisorySources:
      description: >-
        When each public source was last read for this CVE and where its own
        page lives.
      properties:
        nvd_fetched_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        nvd_url:
          type: string
        osv_fetched_at:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
        osv_url:
          type: string
      required:
        - nvd_fetched_at
        - osv_fetched_at
        - nvd_url
        - osv_url
      type: object
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          title: Location
          type: array
        msg:
          title: Message
          type: string
        type:
          title: Error Type
          type: string
      required:
        - loc
        - msg
        - type
      title: ValidationError
      type: object
    SecurityAdvisoryAffected:
      description: >-
        One affected product (source nvd, from the CNA's affected data) or
        package (source osv).
      properties:
        collection_url:
          type: string
        default_status:
          type: string
        ecosystem:
          type: string
        package:
          type: string
        product:
          type: string
        ranges:
          items:
            $ref: '#/components/schemas/SecurityAdvisoryVersionRange'
          type: array
        repository:
          type: string
        source:
          type: string
        vendor:
          type: string
        versions:
          items:
            type: string
          type: array
      required:
        - source
        - ranges
      type: object
    SecurityAdvisoryMetric:
      description: >-
        One CVSS assessment NVD carries for the CVE (Primary is NVD's own,
        Secondary the CNA's).
      properties:
        attack_complexity:
          type: string
        attack_vector:
          type: string
        availability_impact:
          type: string
        base_score:
          type: number
        base_severity:
          type: string
        confidentiality_impact:
          type: string
        exploitability_score:
          anyOf:
            - type: number
            - type: 'null'
        impact_score:
          anyOf:
            - type: number
            - type: 'null'
        integrity_impact:
          type: string
        privileges_required:
          type: string
        scope:
          type: string
        source:
          type: string
        type:
          type: string
        user_interaction:
          type: string
        vector:
          type: string
        version:
          type: string
      required:
        - source
        - type
        - version
        - vector
        - base_score
        - base_severity
        - exploitability_score
        - impact_score
      type: object
    SecurityAdvisoryReference:
      properties:
        source:
          type: string
        tags:
          items:
            type: string
          type: array
        url:
          type: string
      required:
        - url
        - source
        - tags
      type: object
    SecurityAdvisorySSVC:
      description: CISA's SSVC decision for the CVE as republished by NVD.
      properties:
        automatable:
          type: string
        exploitation:
          type: string
        technical_impact:
          type: string
        timestamp:
          anyOf:
            - format: date-time
              type: string
            - type: 'null'
      required:
        - exploitation
        - automatable
        - technical_impact
        - timestamp
      type: object
    SecurityFindingSummary:
      properties:
        affected_clusters:
          type: integer
        affected_workloads:
          type: integer
        cve_id:
          type: string
        disposition_counts:
          $ref: '#/components/schemas/SecurityDispositionCounts'
        first_seen_at:
          format: date-time
          type: string
        fixable_occurrences:
          type: integer
        id:
          format: uuid
          type: string
        last_seen_at:
          format: date-time
          type: string
        occurrences:
          type: integer
        package_name:
          type: string
        package_type:
          type: string
        primary_link:
          anyOf:
            - type: string
            - type: 'null'
        provider:
          type: string
        score:
          anyOf:
            - format: double
              type: number
            - type: 'null'
        severity:
          type: string
        title:
          anyOf:
            - type: string
            - type: 'null'
        known_exploited:
          type: boolean
        kev_date_added:
          anyOf:
            - type: string
            - type: 'null'
        kev_due_date:
          anyOf:
            - type: string
            - type: 'null'
        kev_ransomware_use:
          type: boolean
        epss_score:
          anyOf:
            - format: double
              type: number
            - type: 'null'
        epss_percentile:
          anyOf:
            - format: double
              type: number
            - type: 'null'
        kev_vendor_project:
          anyOf:
            - type: string
            - type: 'null'
        kev_product:
          anyOf:
            - type: string
            - type: 'null'
        kev_vulnerability_name:
          anyOf:
            - type: string
            - type: 'null'
        kev_required_action:
          anyOf:
            - type: string
            - type: 'null'
      required:
        - id
        - provider
        - cve_id
        - package_type
        - package_name
        - severity
        - title
        - primary_link
        - score
        - first_seen_at
        - last_seen_at
        - occurrences
        - affected_clusters
        - affected_workloads
        - fixable_occurrences
        - disposition_counts
        - known_exploited
        - kev_date_added
        - kev_due_date
        - kev_ransomware_use
        - epss_score
        - epss_percentile
        - kev_vendor_project
        - kev_product
        - kev_vulnerability_name
        - kev_required_action
      type: object
    SecurityAdvisoryVersionRange:
      properties:
        fixed:
          type: string
        introduced:
          type: string
        last_affected:
          type: string
        status:
          type: string
      type: object
    SecurityDispositionCounts:
      properties:
        accepted_risk:
          type: integer
        acknowledged:
          type: integer
        open:
          type: integer
        resolved:
          type: integer
      required:
        - open
        - acknowledged
        - accepted_risk
        - resolved
      type: object

````