The VulnCheck V4 API provides direct access to advisory data using a structured query interface. Unlike the v3 index endpoints, v4 endpoints expose first-class query parameters tailored to the advisory data model.
All V4 API methods use https://api.vulncheck.com as the base URL.
| Method | Endpoint | Description |
|---|---|---|
| GET | /v4/advisory | Query advisories across all feeds |
| GET | /v4/advisory/list | List available advisory feed names |
| GET | /v4/backup | List available backup feeds |
| GET | /v4/backup/{feed} | Get pre-signed download URLs for a feed backup |
| GET | /v4/openapi | OpenAPI specification for the V4 API |
All V4 endpoints require a Bearer token. Include your token in the Authorization header:
Authorization: Bearer <your_token>
All error responses follow a consistent JSON structure:
{
"error": true,
"errors": [
"error message here"
]
}
| Status Code | Meaning |
|---|---|
| 400 | Invalid parameters or malformed request |
| 401 | Missing or invalid authentication token |
| 402 | Subscription required for requested data |
| 429 | Rate limit exceeded |
| 503 | Advisory data source unavailable |