API Reference

Export OpenVEX Document (Beta)

get
https://api.socket.dev/v0/orgs//export/openvex/

Export vulnerability exploitability data as an OpenVEX v0.2.0 document.

OpenVEX (Vulnerability Exploitability eXchange) documents communicate the exploitability status of vulnerabilities in software products. This export includes:

  • Patch data: Vulnerabilities fixed by applied Socket patches are marked as "fixed"
  • Reachability analysis: Code reachability determines if vulnerable code is exploitable:
  • Unreachable code → "not_affected" with justification
  • Reachable code → "affected"
  • Unknown/pending → "under_investigation"

Each statement in the document represents a single artifact-vulnerability pair for granular reachability information.

This endpoint consumes 1 unit of your quota.

This endpoint requires the following org token scopes:

  • report:read
Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
string
required

The slug of the organization

string
required

The full scan OR sbom report ID

Query Params
string
Defaults to Socket Security

The author of the VEX document. Should be an individual or organization.

string
Defaults to VEX Generator

The role of the document author (e.g., "VEX Generator", "Security Team").

string

Custom IRI for the VEX document. If not provided, a default IRI will be generated.

Responses

Updated 4 months ago

Language
Credentials
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json

Updated 4 months ago