Repository navigation
Consider including Advisory datasource_id value in API v3 #2458
Description
Context: aboutcode-org/dejacode#588
datasource_id should be included in the API v3 data along advisory_id, advisory_uid.
It can be extracted from the advisory_uid but it's extra work in the consumer side.
Some locations, but maybe in more relevant places:
vulnerablecode/vulnerabilities/api_v3.py
Line 120 in 674cbf5
https://github.com/aboutcode-org/vulnerablecode/blob/674cbf50937d6e9bba3a846d36e83fd9f1e0c47e/vulnerabilities/api_v3.py#L375C7-L375C37
Activity
keshav-space commentedon Oct 6, 2026
Advisory
datasource_idis now included in v3 API endpoints./api/v3/packages
{ "count": 1, "next": null, "previous": null, "results": [ { "purl": "pkg:pypi/django@6.0.7", "affected_by_vulnerabilities": [ { "advisory_id": "PYSEC-2026-3717", "advisory_uid": "pypa/django/PYSEC-2026-3717", + "datasource_id": "pypa", "aliases": [ "BIT-django-2026-15830", "CVE-2026-15830" ], "summary": "An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.", "weighted_severity": 6.2, "exploitability": 0.5, "risk_score": 3.1, "fixed_by_packages": [ "pkg:pypi/django@5.2.17", "pkg:pypi/django@6.0.8" ], "introduced_in_patches": [], "fixed_in_patches": [], "ssvc_trees": [], "resource_url": "http://127.0.0.1/advisories/pypa/django/PYSEC-2026-3717", "todo_count": 0, "is_curation": false, "curating_advisories": [] } ], "fixing_vulnerabilities": [ { "advisory_id": "PYSEC-2026-2090", "resource_url": "http://127.0.0.1/advisories/pypa/django/PYSEC-2026-2090", "advisory_uid": "pypa/django/PYSEC-2026-2090", + "datasource_id": "pypa" } ], "next_non_vulnerable_version": "6.0.8", "latest_non_vulnerable_version": "6.0.8", "risk_score": 3.1 } ] }/api/v3/advisories
{ "count": 1, "next": null, "previous": null, "results": [ { "advisory_id": "CVE-2020-9488", "advisory_uid": "gitlab/maven/log4j/CVE-2020-9488", + "datasource_id": "gitlab", "url": "", "aliases": [ "CVE-2020-9488" ], "summary": "Improper Certificate Validation", "severities": [], "weaknesses": [], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9488", "reference_type": "", "reference_id": "CVE-2020-9488" } ], "exploitability": "0.5", "weighted_severity": "0.0", "risk_score": null, "related_ssvc_trees": [], "todo_count": 0, "is_curation": false, "curating_advisories": [] } ] }/api/v3/affected-by-advisories
{ "count": 8, "next": null, "previous": null, "results": [ { "advisory_id": "CVE-2020-9488", "advisory_uid": "gitlab/maven/log4j/CVE-2020-9488", + "datasource_id": "gitlab", "url": "", "aliases": [ "CVE-2020-9488" ], "summary": "Improper Certificate Validation", "severities": [], "weaknesses": [], "references": [, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9488", "reference_type": "", "reference_id": "CVE-2020-9488" } ], "exploitability": "0.5", "weighted_severity": "0.0", "risk_score": null, "related_ssvc_trees": [], "fixed_by_packages": [ "pkg:maven/log4j/log4j@2.12.3", "pkg:maven/log4j/log4j@2.13.2" ], "todo_count": 0, "is_curation": false, "curating_advisories": [] } ] }/api/v3/fixing-advisories
{ "count": 1, "next": null, "previous": null, "results": [ { "advisory_id": "CVE-2020-9488", "advisory_uid": "gitlab/maven/log4j//CVE-2020-9488", + "datasource_id": "gitlab", "url": "", "aliases": [ "CVE-2020-9488" ], "summary": "Improper Certificate Validation", "severities": [], "weaknesses": [], "references": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9488", "reference_type": "", "reference_id": "CVE-2020-9488" } ], "exploitability": "0.5", "weighted_severity": "0.0", "risk_score": null, "related_ssvc_trees": [], "todo_count": 0, "is_curation": false, "curating_advisories": [] } ] }