Skip to content
Updawg

The vulnerabilities this host is affected by that **nothing fixes in its release** (DAWG-212 part 2): no advisory will ever name them, so neither the update list nor [`exposures`] can. Debian only, from the security tracker; worst first, then longest standing.

GET
/v1/orgs/{org}/hosts/{host_id}/unfixed
curl --request GET \
  --url https://api.updawg.net/v1/orgs/example/hosts/example/unfixed

Parameters

Section titled “Parameters”

Path Parameters

Section titled “Path Parameters”
org
required
string

Organization slug.

host_id
required
string

The hst_… id.

Responses

Section titled “Responses”

200

Section titled “200”

Every unfixed vulnerability affecting the host. Empty for a host that has none — or whose agent is too old to report source packages, or that is not Debian.

Media typeapplication/json
object
unfixed
required
Array<object>
object
binary
required
boolean
description
required
string
first_seen_at
required
string format: date-time
fixed_upstream

The version that fixes it in Debian unstable. Absent: fixed nowhere.

string | null
installed
required

Its version on the host.

string
package
required

The source package the security tracker names — or, when binary, a binary one.

string
remote

Remotely exploitable. Absent: not known.

boolean | null
urgency

low, medium or high. ⚠️ Absent means nobody rated it, not that it is harmless.

string | null
vulnerability
required

CVE-…, or the tracker’s TEMP-… for one without a CVE yet.

string
Examplegenerated
{
  "unfixed": [
    {
      "binary": true,
      "description": "example",
      "first_seen_at": "2026-04-15T12:00:00Z",
      "fixed_upstream": "example",
      "installed": "example",
      "package": "example",
      "remote": true,
      "urgency": "example",
      "vulnerability": "example"
    }
  ]
}

401

Section titled “401”

No session.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

403

Section titled “403”

Not permitted.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

404

Section titled “404”

No such host, or not yours.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

429

Section titled “429”

Over the organization’s request limit. Retry-After says when to try again; RateLimit-Limit is the burst.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}