Skip to main content
POST
/
api
/
v1
/
issues
Create issue
curl --request POST \
  --url https://neo.api.projectdiscovery.io/api/v1/issues \
  --header 'Content-Type: application/json' \
  --data '
{
  "title": "<string>",
  "affected_assets": [
    {
      "asset_owner": "<string>",
      "host": "<string>",
      "ip_address": "<string>",
      "matcher_name": "<string>",
      "metadata": {},
      "port": 123,
      "status": "open",
      "target": "<string>",
      "target_type": "host",
      "url": "<string>"
    }
  ],
  "assignee": "<string>",
  "component": "<string>",
  "cve_ids": [
    "<string>"
  ],
  "cvss_score": "<string>",
  "cwe_ids": [
    "<string>"
  ],
  "description": "<string>",
  "due_date": "2023-11-07T05:31:56Z",
  "evidence": [
    {
      "caption": "<string>",
      "command": "<string>",
      "file": "<string>",
      "line": 123,
      "output": "<string>",
      "request": "<string>",
      "response": "<string>",
      "snippet": "<string>",
      "url": "<string>"
    }
  ],
  "evidence_schema_version": 1,
  "false_positive_reason": "<string>",
  "fingerprint": "<string>",
  "host": "<string>",
  "impact": "<string>",
  "ip_address": "<string>",
  "labels": {},
  "last_seen_at": "2023-11-07T05:31:56Z",
  "metadata": {},
  "port": 123,
  "project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "protocol": "<string>",
  "raw_data": {},
  "reference_urls": [
    "<string>"
  ],
  "remediation": "<string>",
  "reproduction_steps": [
    "<string>"
  ],
  "risk_acceptance_reason": "<string>",
  "source": "<string>",
  "tags": [
    "<string>"
  ],
  "target": "<string>",
  "target_type": "host",
  "task_id": "<string>",
  "template_id": "<string>",
  "ticket_id": "<string>",
  "ticket_url": "<string>",
  "url": "<string>"
}
'
{
  "created_at": "2023-11-07T05:31:56Z",
  "created_by": "<string>",
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "source": "<string>",
  "title": "<string>",
  "updated_at": "2023-11-07T05:31:56Z",
  "affected_assets": [
    {
      "created_by": "<string>",
      "first_seen": "2023-11-07T05:31:56Z",
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "issue_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "last_seen": "2023-11-07T05:31:56Z",
      "status": "open",
      "target_type": "host",
      "asset_owner": "<string>",
      "host": "<string>",
      "ip_address": "<string>",
      "matcher_name": "<string>",
      "metadata": {},
      "port": 123,
      "target": "<string>",
      "url": "<string>"
    }
  ],
  "affected_count": 0,
  "assignee": "<string>",
  "component": "<string>",
  "cve_ids": [
    "<string>"
  ],
  "cvss_score": "<string>",
  "cwe_ids": [
    "<string>"
  ],
  "description": "<string>",
  "due_date": "2023-11-07T05:31:56Z",
  "evidence": [
    {
      "caption": "<string>",
      "command": "<string>",
      "file": "<string>",
      "line": 123,
      "output": "<string>",
      "request": "<string>",
      "response": "<string>",
      "snippet": "<string>",
      "url": "<string>"
    }
  ],
  "evidence_schema_version": 1,
  "false_positive_reason": "<string>",
  "fingerprint": "<string>",
  "host": "<string>",
  "impact": "<string>",
  "ip_address": "<string>",
  "labels": {},
  "last_seen_at": "2023-11-07T05:31:56Z",
  "metadata": {},
  "port": 123,
  "project_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "protocol": "<string>",
  "raw_data": {},
  "reference_urls": [
    "<string>"
  ],
  "remediation": "<string>",
  "reproduction_steps": [
    "<string>"
  ],
  "resolved_at": "2023-11-07T05:31:56Z",
  "resolved_by": "<string>",
  "risk_acceptance_reason": "<string>",
  "slug": "ISSUE-42",
  "tags": [
    "<string>"
  ],
  "target": "<string>",
  "target_type": "host",
  "task_id": "<string>",
  "task_title": "<string>",
  "template_id": "<string>",
  "ticket_id": "<string>",
  "ticket_url": "<string>",
  "url": "<string>"
}

Body

application/json
​
title
string
required
​
affected_assets
object[]

Assets to attach to this issue on creation.

​
assignee
string
​
component
string
​
confidence
enum<string>
Available options:
confirmed,
firm,
tentative
​
cve_ids
string[]
​
cvss_score
string

CVSS score 0.0-10.0 as string

​
cwe_ids
string[]
​
description
string
​
due_date
string<date-time>
​
evidence
object[]
​
evidence_schema_version
enum<integer>
default:1

Version of the structured evidence item format. Supported value is 1.

Available options:
1
​
false_positive_reason
string

Reason this issue was marked as false positive.

​
fingerprint
string

Content-stable hash for dedup. Server-side dedup matches (source, ticket_id, fingerprint).

​
host
string
​
impact
string

Impact summary describing what is at risk if exploited.

​
ip_address
string
​
labels
object
​
last_seen_at
string<date-time>

When the issue was last observed or re-confirmed by a scan.

​
metadata
object
​
port
integer
​
priority
enum<string>
Available options:
critical,
high,
medium,
low,
none
​
project_id
string<uuid>

Assign issue to a project. Omit or null for personal/unscoped.

​
protocol
string
​
raw_data
object
​
reference_urls
string[]

Advisory links; at least one recommended when cve_ids are set.

​
remediation
string

Remediation guidance for the finding.

​
reproduction_steps
string[]

Ordered steps to reproduce the finding.

​
risk_acceptance_reason
string

Reason the risk was accepted.

​
severity
enum<string>
Available options:
critical,
high,
medium,
low,
info,
unknown
​
source
string

Source of the issue (e.g. nuclei, agent, burp, snyk, manual, etc.)

​
status
enum<string>
Available options:
unverified,
open,
confirmed,
in_progress,
resolved,
false_positive,
accepted_risk,
duplicate
​
tags
string[]
​
target
string

What is affected (host, ARN, app, file:line, etc.)

​
target_type
string
default:host

Category of target (host, cloud_resource, app, code, container, dependency, api, certificate)

​
task_id
string
​
template_id
string
​
ticket_id
string

External ticket ID or key.

​
ticket_url
string

Link to external ticket (Jira, Linear, GitHub issue, etc.)

​
type
enum<string>
Available options:
vulnerability,
misconfiguration,
exposure,
information,
compliance,
other
​
url
string

Response

Issue created

​
confidence
enum<string>
required
Available options:
confirmed,
firm,
tentative
​
created_at
string<date-time>
required
​
created_by
string
required

Email of the user who created this issue

​
id
string<uuid>
required
​
priority
enum<string>
required
Available options:
critical,
high,
medium,
low,
none
​
severity
enum<string>
required
Available options:
critical,
high,
medium,
low,
info,
unknown
​
source
string
required

Source of the issue (e.g. nuclei, agent, burp, snyk, manual, etc.)

​
status
enum<string>
required
Available options:
unverified,
open,
confirmed,
in_progress,
resolved,
false_positive,
accepted_risk,
duplicate
​
title
string
required
​
type
enum<string>
required
Available options:
vulnerability,
misconfiguration,
exposure,
information,
compliance,
other
​
updated_at
string<date-time>
required
​
affected_assets
object[] | null

Populated on detail view (GET /issues/:id). NULL on list view.

​
affected_count
integer
default:0

Number of affected assets tracked for the issue.

​
assignee
string | null
​
component
string | null
​
cve_ids
string[]
​
cvss_score
string | null

CVSS score 0.0-10.0 as string (numeric)

​
cwe_ids
string[]
​
description
string | null
​
due_date
string<date-time> | null
​
evidence
object[]
​
evidence_schema_version
enum<integer>
default:1

Version of the structured evidence item format. Supported value is 1.

Available options:
1
​
false_positive_reason
string | null

Reason this issue was marked as false positive.

​
fingerprint
string | null

Content-stable hash for cross-run dedup. Server matches (source, ticket_id, fingerprint) tuple on bulk insert.

​
host
string | null
​
impact
string | null

Business and technical impact of the finding.

​
ip_address
string | null
​
labels
object
​
last_seen_at
string<date-time> | null

When the issue was last observed or re-confirmed by a scan.

​
metadata
object
​
port
integer | null
​
project_id
string<uuid> | null

Project this issue belongs to (null = personal/unscoped).

​
protocol
string | null
​
raw_data
object
​
reference_urls
string[]
​
remediation
string | null

Actionable remediation guidance.

​
reproduction_steps
string[]

Ordered steps to reproduce the finding.

​
resolved_at
string<date-time> | null
​
resolved_by
string | null
​
risk_acceptance_reason
string | null

Reason the risk was accepted.

​
slug
string

Human-readable sequential identifier (e.g. ISSUE-1, ISSUE-2). Auto-assigned on creation.

Example:

"ISSUE-42"

​
tags
string[]
​
target
string | null

What is affected (host, ARN, app, file:line, etc.)

​
target_type
string
default:host

Category of target (host, cloud_resource, app, code, container, dependency, api, certificate)

​
task_id
string | null
​
task_title
string | null
​
template_id
string | null
​
ticket_id
string | null

External ticket ID or key.

​
ticket_url
string | null

Link to external ticket (Jira, Linear, GitHub issue, etc.)

​
url
string | null