> ## Documentation Index > Fetch the complete documentation index at: https://anaconda.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Get Advisory Feed > Returns Anaconda's curated security advisories for the conda packages Anaconda builds and maintains. Results are paginated and ordered by modification time ascending. ## OpenAPI ````yaml anaconda-platform/admin/advisory-api/advisory_api.json GET /api/v1/advisories/feed openapi: 3.1.0 info: title: Advisory API version: 0.1.0 servers: - url: https://anaconda.com description: Anaconda Cloud security: [] paths: /api/v1/advisories/feed: get: tags: - advisories summary: Get Advisory Feed description: >- Returns Anaconda's curated security advisories for the conda packages Anaconda builds and maintains. Results are paginated and ordered by modification time ascending. operationId: get_advisory_feed parameters: - in: query name: modified_since required: false schema: type: string format: date-time description: >- Only return advisories whose `effective_modified_at` is after this timestamp. Use ISO 8601 format with a timezone, for example `2026-06-02T18:36:37.473Z`. Anaconda recommends UTC. To sync incrementally, pass the `watermark` from your previous response. - in: query name: continuation required: false schema: type: string description: >- Token from a previous response to fetch the next page. When provided, all other query parameters are ignored. - in: query name: limit required: false schema: type: integer default: 50 minimum: 1 maximum: 100 description: The number of advisories to return per page. - in: query name: feed_format required: false schema: type: string default: nvdv2 description: >- Determines the structure of the `representations` field in each advisory. `nvdv2` is the only format currently supported. responses: '200': description: >- A page of the advisory feed. The example is abbreviated: `purls` entries are trimmed, and `representations.nvdv2` contains the advisory's complete NVD 2.0 document. content: application/json: schema: $ref: '#/components/schemas/AdvisoryFeed' example: feed_version: 1 feed_format: nvdv2 modified_since: '2026-04-01T00:00:00Z' count: 1 limit: 100 watermark: '2026-05-18T14:22:11Z' continuation: null next_url: null has_more: false advisories: - advisory_id: CVE-2021-41217 canonical: aliases: - CVE-2021-41217 description: >- TensorFlow is an open source platform for machine learning. In affected versions, the code for boosted trees in TensorFlow is vulnerable to a null pointer dereference... severity: score: 5.5 cwes: - CWE-476 artifact_sha256s: - >- 9376685c2d5bbb4479e7975a689e6e8ee6926882392cd573029a772b3b39cdcc purls: - pkg:conda/main/tensorflow@2.6.0?... ranges: - type: ECOSYSTEM events: - introduced: '0' - fixed: 2.7.2 - introduced: 2.8.0 - fixed: 2.8.1 - introduced: 2.9.0 - fixed: 2.9.1 - introduced: 2.10.0rc0 - last_affected: 2.10.0rc3 timestamps: published_at: '2021-11-05T21:15:09.073Z' modified_at: '2021-11-09T16:06:40.757Z' anaconda_modified_at: '2021-12-13T00:00:00Z' effective_modified_at: '2021-12-13T00:00:00Z' created_at: '2025-12-05T21:23:25.152571Z' updated_at: '2026-04-01T04:07:07.349Z' is_curated: true representations: nvdv2: cve: id: CVE-2021-41217 sourceIdentifier: security-advisories@github.com published: '2021-11-05T21:15:09.073Z' lastModified: '2021-11-09T16:06:40.757Z' vulnStatus: Analyzed '401': description: No token was provided, or the token is invalid content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: error: code: auth_required message: Authentication is required to access this resource. '403': description: Access is forbidden content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: error: code: access_denied message: Access forbidden '422': description: >- A query parameter failed validation. The response body describes the error. '429': description: >- Rate limit exceeded. Retry after the period indicated by the `Retry-After` header. '500': description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: error: code: internal_error message: Something went wrong security: - JWT or Access Token: [] components: schemas: AdvisoryFeed: type: object required: - feed_version - feed_format - count - limit - has_more - advisories properties: feed_version: type: integer description: The version number of the feed format. feed_format: type: string description: >- The format used for advisory representations in this response (for example, `nvdv2`). modified_since: type: - string - 'null' description: >- The cutoff timestamp you provided, echoed back in normalized UTC. Remains the same across all pages. `null` if you did not provide one. count: type: integer description: The number of advisories returned in the current page. limit: type: integer description: The maximum number of advisories per page, as requested. watermark: type: - string - 'null' description: >- The most recent modification timestamp across all matching advisories. continuation: type: - string - 'null' description: >- Pass this token as the `continuation` query parameter to fetch the next page. `null` when there are no more pages. next_url: type: - string - 'null' description: >- A ready-to-use relative URL for the next page. `null` when there are no more pages. has_more: type: boolean description: Indicates whether additional pages of results are available. advisories: type: array description: The list of advisory objects in the current page. items: $ref: '#/components/schemas/Advisory' ErrorResponse: type: object description: The metadata contained in an error response. required: - error properties: error: type: object required: - code - message properties: code: type: string description: A machine-readable error code. example: auth_required message: type: string description: A human-readable description of the error. example: Authentication is required to access this resource. data: description: Additional details about the error. Advisory: type: object required: - advisory_id - canonical - representations properties: advisory_id: type: string description: The unique identifier for this advisory, typically a CVE ID. example: CVE-2021-41217 canonical: $ref: '#/components/schemas/AdvisoryCanonical' representations: type: object description: >- Contains the advisory data in one or more format-specific representations (for example, `nvdv2`). properties: nvdv2: type: object additionalProperties: true AdvisoryCanonical: type: object description: The normalized, format-independent representation of an advisory. properties: aliases: type: array items: type: string description: >- Alternative identifiers for this advisory (for example, GHSA IDs or other database references). description: type: string description: A human-readable description of the vulnerability. severity: $ref: '#/components/schemas/AdvisorySeverity' cwes: type: array items: type: string description: >- Common Weakness Enumeration (CWE) identifiers associated with this advisory. artifact_sha256s: type: array items: type: string description: SHA-256 hashes of the specific artifacts affected by this advisory. purls: type: array items: type: string description: >- Package URLs (PURLs) that identify the exact conda package versions and builds affected by this advisory. An advisory does not apply to every file in a package. ranges: type: array items: $ref: '#/components/schemas/AdvisoryRange' description: >- The version ranges affected by this vulnerability, expressed as OSV-style events. The ranges are derived from the advisory's upstream NVD 2.0 data (the `nvdv2` representation) and re-expressed in a structured, searchable format. They are not computed from conda artifacts. For conda-specific impact, use `artifact_sha256s` and `purls`. timestamps: $ref: '#/components/schemas/AdvisoryTimestamps' is_curated: type: boolean description: >- Indicates whether this advisory has been reviewed and curated by Anaconda. AdvisorySeverity: type: object properties: score: type: number description: The CVSS severity score for this advisory. AdvisoryRange: type: object description: >- A range of affected versions, derived from the advisory's upstream NVD 2.0 data and expressed as OSV-style events. properties: type: type: string description: The type of version range (for example, `ECOSYSTEM`). events: type: array items: $ref: '#/components/schemas/AdvisoryRangeEvent' description: >- An ordered list of version events that define the boundaries of the affected range. AdvisoryTimestamps: type: object description: Timestamps tracking the lifecycle of this advisory. properties: published_at: type: string description: When the advisory was first published by its source. modified_at: type: string description: When the advisory was last modified by its original source. anaconda_modified_at: type: - string - 'null' description: >- When Anaconda last modified this advisory, such as during curation. `null` if Anaconda has not modified it. effective_modified_at: type: string description: >- The later of `modified_at` and `anaconda_modified_at`. This is the timestamp used for feed ordering and filtering. created_at: type: string description: When this advisory record was first created in Anaconda's system. updated_at: type: string description: When this advisory record was last updated in Anaconda's system. AdvisoryRangeEvent: type: object description: A single version event within an affected range. additionalProperties: type: string securitySchemes: JWT or Access Token: bearerFormat: JWT description: >- Bearer token obtained by authenticating with your organization's [service account](/anaconda-platform/admin/service-accounts) credentials (`client_id` and `client_secret`). See the [Getting started](/anaconda-platform/admin/advisory-api/advisory-api) page for the full authentication flow. scheme: bearer type: http ````