> ## Documentation Index > Fetch the complete documentation index at: https://anaconda.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Get Advisory by ID > Retrieve a single advisory by its identifier ## OpenAPI ````yaml anaconda-platform/admin/advisory-api/advisory_api.json GET /api/v1/advisories/{advisory_id} openapi: 3.1.0 info: title: Advisory API version: 0.1.0 servers: - url: https://anaconda.com description: Anaconda Cloud security: [] paths: /api/v1/advisories/{advisory_id}: get: tags: - advisories summary: Get Advisory by ID description: Retrieve a single advisory by its identifier operationId: get_advisory_by_id parameters: - name: advisory_id in: path required: true schema: type: string minLength: 1 example: CVE-2021-41217 description: The advisory identifier. responses: '200': description: >- The requested advisory. The example is abbreviated: `purls` entries are trimmed, and `representations.nvdv2` contains the advisory's complete NVD 2.0 document. content: application/json: schema: $ref: '#/components/schemas/Advisory' example: advisory_id: CVE-2021-41217 canonical: aliases: - CVE-2021-41217 description: >- TensorFlow is an open source platform for machine learning. In affected versions, the code for boosted trees in TensorFlow is vulnerable to a null pointer dereference... severity: score: 5.5 cwes: - CWE-476 artifact_sha256s: - >- 9376685c2d5bbb4479e7975a689e6e8ee6926882392cd573029a772b3b39cdcc purls: - pkg:conda/main/tensorflow@2.6.0?... ranges: - type: ECOSYSTEM events: - introduced: '0' - fixed: 2.7.2 - introduced: 2.8.0 - fixed: 2.8.1 - introduced: 2.9.0 - fixed: 2.9.1 - introduced: 2.10.0rc0 - last_affected: 2.10.0rc3 timestamps: published_at: '2021-11-05T21:15:09.073Z' modified_at: '2021-11-09T16:06:40.757Z' anaconda_modified_at: '2021-12-13T00:00:00Z' effective_modified_at: '2021-12-13T00:00:00Z' created_at: '2025-12-05T21:23:25.152571Z' updated_at: '2026-04-01T04:07:07.349Z' is_curated: true representations: nvdv2: cve: id: CVE-2021-41217 sourceIdentifier: security-advisories@github.com published: '2021-11-05T21:15:09.073Z' lastModified: '2021-11-09T16:06:40.757Z' vulnStatus: Analyzed '401': description: No token was provided, or the token is invalid content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: error: code: auth_required message: Authentication is required to access this resource. '403': description: Access is forbidden content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: error: code: access_denied message: Access forbidden '404': description: The specified advisory was not found content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: error: code: not_found message: Resource not found '429': description: >- Rate limit exceeded. Retry after the period indicated by the `Retry-After` header. '500': description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: error: code: internal_error message: Something went wrong security: - JWT or Access Token: [] components: schemas: Advisory: type: object required: - advisory_id - canonical - representations properties: advisory_id: type: string description: The unique identifier for this advisory, typically a CVE ID. example: CVE-2021-41217 canonical: $ref: '#/components/schemas/AdvisoryCanonical' representations: type: object description: >- Contains the advisory data in one or more format-specific representations (for example, `nvdv2`). properties: nvdv2: type: object additionalProperties: true ErrorResponse: type: object description: The metadata contained in an error response. required: - error properties: error: type: object required: - code - message properties: code: type: string description: A machine-readable error code. example: auth_required message: type: string description: A human-readable description of the error. example: Authentication is required to access this resource. data: description: Additional details about the error. AdvisoryCanonical: type: object description: The normalized, format-independent representation of an advisory. properties: aliases: type: array items: type: string description: >- Alternative identifiers for this advisory (for example, GHSA IDs or other database references). description: type: string description: A human-readable description of the vulnerability. severity: $ref: '#/components/schemas/AdvisorySeverity' cwes: type: array items: type: string description: >- Common Weakness Enumeration (CWE) identifiers associated with this advisory. artifact_sha256s: type: array items: type: string description: SHA-256 hashes of the specific artifacts affected by this advisory. purls: type: array items: type: string description: >- Package URLs (PURLs) that identify the exact conda package versions and builds affected by this advisory. An advisory does not apply to every file in a package. ranges: type: array items: $ref: '#/components/schemas/AdvisoryRange' description: >- The version ranges affected by this vulnerability, expressed as OSV-style events. The ranges are derived from the advisory's upstream NVD 2.0 data (the `nvdv2` representation) and re-expressed in a structured, searchable format. They are not computed from conda artifacts. For conda-specific impact, use `artifact_sha256s` and `purls`. timestamps: $ref: '#/components/schemas/AdvisoryTimestamps' is_curated: type: boolean description: >- Indicates whether this advisory has been reviewed and curated by Anaconda. AdvisorySeverity: type: object properties: score: type: number description: The CVSS severity score for this advisory. AdvisoryRange: type: object description: >- A range of affected versions, derived from the advisory's upstream NVD 2.0 data and expressed as OSV-style events. properties: type: type: string description: The type of version range (for example, `ECOSYSTEM`). events: type: array items: $ref: '#/components/schemas/AdvisoryRangeEvent' description: >- An ordered list of version events that define the boundaries of the affected range. AdvisoryTimestamps: type: object description: Timestamps tracking the lifecycle of this advisory. properties: published_at: type: string description: When the advisory was first published by its source. modified_at: type: string description: When the advisory was last modified by its original source. anaconda_modified_at: type: - string - 'null' description: >- When Anaconda last modified this advisory, such as during curation. `null` if Anaconda has not modified it. effective_modified_at: type: string description: >- The later of `modified_at` and `anaconda_modified_at`. This is the timestamp used for feed ordering and filtering. created_at: type: string description: When this advisory record was first created in Anaconda's system. updated_at: type: string description: When this advisory record was last updated in Anaconda's system. AdvisoryRangeEvent: type: object description: A single version event within an affected range. additionalProperties: type: string securitySchemes: JWT or Access Token: bearerFormat: JWT description: >- Bearer token obtained by authenticating with your organization's [service account](/anaconda-platform/admin/service-accounts) credentials (`client_id` and `client_secret`). See the [Getting started](/anaconda-platform/admin/advisory-api/advisory-api) page for the full authentication flow. scheme: bearer type: http ````