Anaconda Cves API

openapi: 3.2.0
info:
  version: '6.5'
  title: Anaconda Server Cves API
servers:
- url: https://api.anaconda.cloud/api
tags:
- name: cves
paths:
  /channels/{channel_name}/cves_history:
    get:
      tags:
      - cves
      summary: Get the cve history logs of the channel
      operationId: repo.endpoints.channels.channels_cve_history.get_cve_channel_history
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/from-date-parameter'
      - $ref: '#/components/parameters/to-date-parameter'
      - $ref: '#/components/parameters/min-download-count-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/cve-notifications-event-type-query'
      - $ref: '#/components/parameters/search-query'
      - $ref: '#/components/parameters/max-impact-score-query'
      - $ref: '#/components/parameters/min-impact-score-query'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      responses:
        '200':
          description: successfully retrieved the cve history logs for the channel
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ChannelCveHistory'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
    post:
      tags:
      - cves
      summary: generate min-download-count-parametertory for a specific timestamp for example for existing cves history
      operationId: repo.endpoints.channels.channels_cve_history.generate_cve_notifications
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CVENotificationsTimestamp'
      responses:
        '202':
          description: successfully starting building of cve notifications
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
        '200':
          description: No history available for given timestamp
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/cves:
    get:
      tags:
      - cves
      summary: Get all the CVE's associated with this channel
      operationId: repo.endpoints.channels.channel_artifacts.list_channel_cves
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      - $ref: '#/components/parameters/search-query'
      - $ref: '#/components/parameters/max_cve_score-query'
      - $ref: '#/components/parameters/architectures-query'
      - $ref: '#/components/parameters/cve-name-query'
      - $ref: '#/components/parameters/version-query'
      - $ref: '#/components/parameters/min_packages_count-query'
      - $ref: '#/components/parameters/artifact_name-query'
      - $ref: '#/components/parameters/cve-sort-query'
      - $ref: '#/components/parameters/with_cve_counts_by_severity-query'
      responses:
        '200':
          description: successfully returns the CVE objects related to this channel
          content:
            application/json:
              schema:
                type: object
                properties:
                  total_count:
                    type: number
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/CVE'
                  cve_count_by_severity:
                    $ref: '#/components/schemas/CVEsBySeverity'
            text/csv:
              schema:
                type: string
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/cves/ws:
    get:
      tags:
      - cves
      operationId: repo.endpoints.channels.channel_artifacts.cve_report_batched
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      - $ref: '#/components/parameters/search-query'
      - $ref: '#/components/parameters/max_cve_score-query'
      - $ref: '#/components/parameters/architectures-query'
      - $ref: '#/components/parameters/cve-name-query'
      - $ref: '#/components/parameters/version-query'
      - $ref: '#/components/parameters/artifact_name-query'
      responses:
        '101':
          description: Read-only websocket with new events
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CVE'
        '400':
          $ref: '#/components/responses/BadRequest'
      security:
      - jwt: []
  /channels/{channel_name}/cves/{cve_id}:
    get:
      tags:
      - cves
      summary: Get channel CVE details
      operationId: repo.endpoints.channels.channel_artifacts.get_channel_cve_details
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/cve_id-parameter'
      responses:
        '200':
          description: successfully returns the channel's CVE detailss
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CVE'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/cves/{cve_id}/files:
    get:
      tags:
      - cves
      summary: Get all package files, associated with specific CVE in the channel
      operationId: repo.endpoints.channels.channel_artifacts.list_channel_cve_files
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/cve_id-parameter'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      responses:
        '200':
          description: successfully returns routes, related to this CVE in the channel
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CVEPackage'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/artifacts/{artifact_family}/{artifact_name}/cves:
    get:
      tags:
      - cves
      summary: Get all the CVE's associated with this channel and artifact
      operationId: repo.endpoints.channels.channel_artifacts.list_artifact_cves
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/artifact_family-parameter'
      - $ref: '#/components/parameters/artifact_name-parameter'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      - $ref: '#/components/parameters/search-query'
      - $ref: '#/components/parameters/with_cve_counts_by_severity-query'
      responses:
        '200':
          description: successfully returns the CVE objects, related to this CVE in artifact
          content:
            application/json:
              schema:
                type: object
                properties:
                  total_count:
                    type: number
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/CVE'
                  cve_count_by_severity:
                    $ref: '#/components/schemas/CVEsBySeverity'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/artifacts/{artifact_family}/{artifact_name}/cves/{cve_id}:
    get:
      tags:
      - cves
      summary: Get artifact CVE details
      operationId: repo.endpoints.channels.channel_artifacts.get_artifact_cve_details
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/artifact_family-parameter'
      - $ref: '#/components/parameters/artifact_name-parameter'
      - $ref: '#/components/parameters/cve_id-parameter'
      responses:
        '200':
          description: successfully returns the artifact CVE details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CVE'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/artifacts/{artifact_family}/{artifact_name}/cves/{cve_id}/files:
    get:
      tags:
      - cves
      summary: successfully returns routes, related to this CVE in the artifact
      operationId: repo.endpoints.channels.channel_artifacts.list_artifact_cve_files
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/artifact_family-parameter'
      - $ref: '#/components/parameters/artifact_name-parameter'
      - $ref: '#/components/parameters/cve_id-parameter'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      responses:
        '200':
          description: successfully returns routes, related to this CVE in the channel
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CVEPackage'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/subchannels/{subchannel_name}/cves_history:
    get:
      tags:
      - cves
      summary: Get the cve history logs of the subchannel
      operationId: repo.endpoints.channels.subchannels_cve_history.get_cve_subchannel_history
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/subchannel-parameter'
      - $ref: '#/components/parameters/to-date-parameter'
      - $ref: '#/components/parameters/from-date-parameter'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/cve-notifications-event-type-query'
      - $ref: '#/components/parameters/search-query'
      - $ref: '#/components/parameters/min-download-count-query'
      - $ref: '#/components/parameters/max-impact-score-query'
      - $ref: '#/components/parameters/min-impact-score-query'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      responses:
        '200':
          description: successfully retrieved the cve history logs for the channel
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ChannelCveHistory'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
    post:
      tags:
      - cves
      summary: generate cves_history for a specific timestamp for example for existing cves history
      operationId: repo.endpoints.channels.subchannels_cve_history.generate_cve_notifications
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/subchannel-parameter'
      - $ref: '#/components/parameters/timestamp-parameter'
      responses:
        '202':
          description: successfully starting building of cve notifications
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
        '200':
          description: No history available for given timestamp
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/subchannels/{subchannel_name}/cves:
    get:
      tags:
      - cves
      summary: Get all the CVE's associated with this subchannel
      operationId: repo.endpoints.channels.subchannel_artifacts.list_subchannel_cves
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/subchannel-parameter'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      - $ref: '#/components/parameters/search-query'
      - $ref: '#/components/parameters/max_cve_score-query'
      - $ref: '#/components/parameters/architectures-query'
      - $ref: '#/components/parameters/cve-name-query'
      - $ref: '#/components/parameters/version-query'
      - $ref: '#/components/parameters/min_packages_count-query'
      - $ref: '#/components/parameters/artifact_name-query'
      - $ref: '#/components/parameters/cve-sort-query'
      - $ref: '#/components/parameters/with_cve_counts_by_severity-query'
      responses:
        '200':
          description: successfully returns the CVE objects related to this channel
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CVE'
            text/csv:
              schema:
                type: string
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/subchannels/{subchannel_name}/cves/ws:
    get:
      tags:
      - cves
      operationId: repo.endpoints.channels.subchannel_artifacts.cve_report_batched
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/subchannel-parameter'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      - $ref: '#/components/parameters/search-query'
      - $ref: '#/components/parameters/max_cve_score-query'
      - $ref: '#/components/parameters/architectures-query'
      - $ref: '#/components/parameters/cve-name-query'
      - $ref: '#/components/parameters/version-query'
      - $ref: '#/components/parameters/artifact_name-query'
      responses:
        '101':
          description: Read-only websocket with new events
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CVE'
        '400':
          $ref: '#/components/responses/BadRequest'
      security:
      - jwt: []
  /channels/{channel_name}/subchannels/{subchannel_name}/cves/{cve_id}:
    get:
      tags:
      - cves
      summary: Get subchannel CVE details
      operationId: repo.endpoints.channels.subchannel_artifacts.get_subchannel_cve_details
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/subchannel-parameter'
      - $ref: '#/components/parameters/cve_id-parameter'
      responses:
        '200':
          description: successfully returns subchannel CVE details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CVE'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/subchannels/{subchannel_name}/cves/{cve_id}/files:
    get:
      tags:
      - cves
      summary: Get all package files, associated with specific CVE in the channel
      operationId: repo.endpoints.channels.subchannel_artifacts.list_subchannel_cve_files
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/subchannel-parameter'
      - $ref: '#/components/parameters/cve_id-parameter'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      responses:
        '200':
          description: successfully returns routes, related to this CVE in the subchannel
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CVEPackage'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/subchannels/{subchannel_name}/artifacts/{artifact_family}/{artifact_name}/cves:
    get:
      tags:
      - cves
      summary: Get all the CVE's associated with this subchannel and artifact
      operationId: repo.endpoints.channels.subchannel_artifacts.list_artifact_cves
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/subchannel-parameter'
      - $ref: '#/components/parameters/artifact_family-parameter'
      - $ref: '#/components/parameters/artifact_name-parameter'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      - $ref: '#/components/parameters/search-query'
      - $ref: '#/components/parameters/with_cve_counts_by_severity-query'
      responses:
        '200':
          description: successfully returns the CVE objects, related to this subchannel
          content:
            application/json:
              schema:
                type: object
                properties:
                  total_count:
                    type: number
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/CVE'
                  cve_count_by_severity:
                    $ref: '#/components/schemas/CVEsBySeverity'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/subchannels/{subchannel_name}/artifacts/{artifact_family}/{artifact_name}/cves/{cve_id}:
    get:
      tags:
      - cves
      summary: Get subchannel artifact CVE details
      operationId: repo.endpoints.channels.subchannel_artifacts.get_artifact_cve_details
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/subchannel-parameter'
      - $ref: '#/components/parameters/artifact_family-parameter'
      - $ref: '#/components/parameters/artifact_name-parameter'
      - $ref: '#/components/parameters/cve_id-parameter'
      responses:
        '200':
          description: successfully returns the subchannel artifact CVE details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CVE'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /channels/{channel_name}/subchannels/{subchannel_name}/artifacts/{artifact_family}/{artifact_name}/cves/{cve_id}/files:
    get:
      tags:
      - cves
      summary: successfully returns routes, related to this CVE in the artifact
      operationId: repo.endpoints.channels.subchannel_artifacts.list_artifact_cve_files
      parameters:
      - $ref: '#/components/parameters/channel-parameter'
      - $ref: '#/components/parameters/subchannel-parameter'
      - $ref: '#/components/parameters/artifact_family-parameter'
      - $ref: '#/components/parameters/artifact_name-parameter'
      - $ref: '#/components/parameters/cve_id-parameter'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      responses:
        '200':
          description: successfully returns routes, related to this CVE in the artifact
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CVE'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /cves:
    get:
      tags:
      - cves
      summary: Get list of the latest CVEs
      operationId: repo.endpoints.cves.list_cves
      parameters:
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      - $ref: '#/components/parameters/min_packages_count-query'
      - $ref: '#/components/parameters/search-query'
      - $ref: '#/components/parameters/cve-sort-query'
      responses:
        '200':
          description: get latest CVEs
          content:
            application/json:
              schema:
                type: object
                properties:
                  total_count:
                    type: number
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/CVE'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /cves/{cve_id}:
    get:
      tags:
      - cves
      summary: Get the CVE by its ID
      operationId: repo.endpoints.cves.get_cve
      parameters:
      - $ref: '#/components/parameters/cve_id-parameter'
      responses:
        '200':
          description: get cve detailss
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CVE'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /cves/{cve_id}/files:
    get:
      tags:
      - cves
      summary: Get the CVE by its ID
      operationId: repo.endpoints.cves.list_cve_files
      parameters:
      - $ref: '#/components/parameters/cve_id-parameter'
      - $ref: '#/components/parameters/offset-query'
      - $ref: '#/components/parameters/limit-query'
      - $ref: '#/components/parameters/cve_status-query'
      - $ref: '#/components/parameters/min_cve_score-query'
      responses:
        '200':
          description: get cve all relevant files
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CVE'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
  /cves-report:
    get:
      tags:
      - cves
      summary: Get list of the CVEs with status for provided list of packages
      operationId: repo.endpoints.cves.list_cves_for_packages
      parameters:
      - $ref: '#/components/parameters/sha256s-query'
      - $ref: '#/components/parameters/use_blob-query'
      responses:
        '200':
          description: get CVE status for packages
          content:
            application/json:
              schema:
                type: object
                properties:
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/CVEsReport'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
    post:
      tags:
      - cves
      summary: Get list of the CVEs with status for provided list of packages. Using Post as Get
      operationId: repo.endpoints.cves.list_cves_for_packages_post_query
      parameters:
      - $ref: '#/components/parameters/use_blob-query'
      requestBody:
        content:
          application/json:
            schema:
              type: object
              required:
              - sha256s
              properties:
                sha256s:
                  type: array
                  description: list of sha256 checksums
                  items:
                    type: string
      responses:
        '200':
          description: get CVE status for packages
          content:
            application/json:
              schema:
                type: object
                properties:
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/CVEsReport'
        '401':
          $ref: '#/components/responses/Unauthenticated'
        '403':
          $ref: '#/components/responses/Forbidden'
        '500':
          $ref: '#/components/responses/InternalServerError'
      security:
      - jwt: []
      - user_token: []
components:
  responses:
    Forbidden:
      description: Access is forbidden
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    NotFound:
      description: The specified resource was not found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    InternalServerError:
      description: Internal server error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    BadRequest:
      description: Server cannot execute request due to something that is perceived to be a client error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    Unauthenticated:
      description: Unauthenticated, no token is provided or token is invalid
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
  schemas:
    CVENotificationChanges:
      type: array
      additionalProperties: true
      required:
      - cve_id
      - new_score
      - new_status
      properties:
        cve_id:
          type: string
        old_score:
          type: number
        new_score:
          type: string
        old_status:
          type: string
        new_status:
          type: string
    ChannelCveHistory:
      type: array
      description: List of cve histories
      items:
        $ref: '#/components/schemas/CVENotificationsHistory'
    CVENotificationsTimestamp:
      required:
      - timestamp
      additionalProperties: false
      type: object
      description: Timestamp for Generation of CVE Notifications
      properties:
        timestamp:
          type: string
          format: date-time
    ArtifactFamily:
      type: string
      enum:
      - anaconda_project
      - anaconda_env
      - cve
      - conda
      - python
      - cran
      - notebook
      - docker
      - sbom
    CVEPackage:
      type: object
      description: CVE Package information
      properties:
        channel_name:
          type: string
          example: The Channel
        parent_channel_name:
          type: string
          example: The Root Channel
        cve_status:
          $ref: '#/components/schemas/CVE_status'
        artifact_family:
          $ref: '#/c

# --- truncated at 32 KB (46 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/anaconda/refs/heads/main/openapi/anaconda-cves-api-openapi.yml