# Dependency-Track Vulnerability API

**Canonical:** https://apis.io/apis/dependency-track/dependency-track-vulnerability-api/  
**Provider:** Dependency-Track — https://apis.io/providers/dependency-track/  
**Base URL:** http://{hostname}:{port}/api  
**Documentation:** https://docs.dependencytrack.org/integrations/rest-api/

Dependency-Track Vulnerability API is one of 48 APIs that [Dependency-Track](https://apis.io/providers/dependency-track/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 12 JSON Schema definitions. Tagged areas include vulnerability. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and 12 JSON Schemas.

The vulnerability API from Dependency-Track — 11 operation(s) for vulnerability.

## Operations (16)

| Method | Path | Summary |
|---|---|---|
| GET | `/v1/vulnerability` | Returns a list of all vulnerabilities |
| POST | `/v1/vulnerability` | Update vulnerability |
| PUT | `/v1/vulnerability` | Creates a new vulnerability |
| GET | `/v1/vulnerability/component/{uuid}` | Returns a list of all vulnerabilities for a specific component |
| GET | `/v1/vulnerability/project/{uuid}` | Returns a list of all vulnerabilities for a specific project |
| DELETE | `/v1/vulnerability/source/{source}/vuln/{vulnId}/component/{component}` | Removes assignment of a vulnerability from a component |
| POST | `/v1/vulnerability/source/{source}/vuln/{vulnId}/component/{component}` | Assigns a vulnerability to a component |
| GET | `/v1/vulnerability/source/{source}/vuln/{vuln}` | Returns a specific vulnerability |
| GET | `/v1/vulnerability/source/{source}/vuln/{vuln}/projects` | Returns a list of all projects affected by a specific vulnerability |
| GET | `/v1/vulnerability/tag/{tag}` | Returns a list of all vulnerabilities by tag |
| GET | `/v1/vulnerability/vulnId` | Generates an internal vulnerability identifier |
| DELETE | `/v1/vulnerability/{uuid}` | Deletes a vulnerability |
| GET | `/v1/vulnerability/{uuid}` | Returns a specific vulnerability |
| DELETE | `/v1/vulnerability/{uuid}/component/{component}` | Removes assignment of a vulnerability from a component |
| POST | `/v1/vulnerability/{uuid}/component/{component}` | Assigns a vulnerability to a component |
| POST | `/v1/vulnerability/{uuid}/tags` | Updates tags for a vulnerability |

## Machine-readable artifacts (14)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/openapi/dependency-track-vulnerability-api-openapi.yml
- **Documentation** — https://docs.dependencytrack.org/integrations/rest-api/
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-component-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-vulnerability-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-project-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-notification-rule-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-portfolio-metrics-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-project-metrics-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-workload-identity-provider-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-clone-project-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-create-workload-identity-provider-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-create-oauth-token-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-create-component-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/dependency-track/refs/heads/main/json-schema/dependency-track-update-workload-identity-provider-request-schema.json

## Other Dependency-Track APIs (12)

- [Dependency-Track Notifications](https://apis.io/apis/dependency-track/dependency-track-notifications/)
- [Dependency-Track Acl API](https://apis.io/apis/dependency-track/dependency-track-acl-api/)
- [Dependency-Track Analysis API](https://apis.io/apis/dependency-track/dependency-track-analysis-api/)
- [Dependency-Track Badge API](https://apis.io/apis/dependency-track/dependency-track-badge-api/)
- [Dependency-Track Bom API](https://apis.io/apis/dependency-track/dependency-track-bom-api/)
- [Dependency-Track Calculator API](https://apis.io/apis/dependency-track/dependency-track-calculator-api/)
- [Dependency-Track Component API](https://apis.io/apis/dependency-track/dependency-track-component-api/)
- [Dependency-Track Component Property API](https://apis.io/apis/dependency-track/dependency-track-componentproperty-api/)
- [Dependency-Track Components API](https://apis.io/apis/dependency-track/dependency-track-components-api/)
- [Dependency-Track Config Property API](https://apis.io/apis/dependency-track/dependency-track-configproperty-api/)
- [Dependency-Track Cwe API](https://apis.io/apis/dependency-track/dependency-track-cwe-api/)
- [Dependency-Track Dependency Graph API](https://apis.io/apis/dependency-track/dependency-track-dependencygraph-api/)

## Tags

vulnerability

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/dependency-track/dependency-track-vulnerability-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/dependency-track/.