Skip to content

VCIO V3 API migration completed #173

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
TG1999 wants to merge 4 commits into
base: main
Choose a base branch
from
+15 −0
Open

VCIO V3 API migration completed #173

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
a7e93fd
VCIO V3 API migration completed
TG1999 Jul 6, 2026
c591c43
fix typo
TG1999 Jul 6, 2026
ce97488
Add reference to use V3 API
TG1999 Jul 6, 2026
a956111
Address review comments
TG1999 Jul 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions website/blog/vcio-v3-migration-completed/2026-07-06-vcio-v3-migration-completed.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
---
slug: vcio-v3-migration-completed
title: VulnerableCode V3 API migration is completed
authors: [tg1999]
tags: [vcio, vulnerabilities, advisories, purl, api]
hide_table_of_contents: false
---

# VulnerableCode API Deprecation and V3 Introduction

The AboutCode team has released v40.0.0 https://github.com/aboutcode-org/vulnerablecode/releases/tag/v40.0.0 with the the V3 VulnerableCode API which replaces "vulnerabilities" with "advisories". Prior to this release we reported vulnerabilities for each PURL (Package-URL) where a vulnerability combined multiple advisories. With the new advisory model each advisory is reported individually which provides more granular data and makes it easier for you to prioritize data sources that you trust more.

With this release the VulnerableCode V1 and V2 APIs have been deprecated along with the corresponding vulnerability-based data. You can download the V1/V2 vulnerability data from: https://github.com/aboutcode-org/vulnerablecode/releases/tag/vcio-v1. This is a final data archive for the old data structure.

Refer to https://public.vulnerablecode.io/api/docs/ and https://vulnerablecode.readthedocs.io/en/latest/api_v3_usage.html to understand the latest V3 API usage.