---
updatedAt: 2026-07-26T12:31:37.000Z
agentTools:
  siteIndex: https://docs.jfrog.com/llms.txt
  projectIndex: https://docs.jfrog.com/security/llms.txt
---

# Get Contextual Analysis per Vulnerability V1

Returns contextual analysis results for a specific vulnerability on a component (v1 format). Requires Read permission.

# OpenAPI definition

```json
{
  "openapi": "3.1.0",
  "info": {
    "title": "Xray REST APIs",
    "description": "Combined JFrog Xray REST API specification (all endpoints).",
    "version": "3.140"
  },
  "servers": [
    {
      "url": "https://jf.example.com/xray",
      "description": "JFrog Platform (Xray)"
    }
  ],
  "security": [
    {
      "basicAuth": []
    }
  ],
  "paths": {
    "/api/v1/cve_applicability": {
      "get": {
        "operationId": "get-contextual-analysis-per-vulnerability-v1",
        "summary": "Get Contextual Analysis per Vulnerability V1",
        "description": "Returns contextual analysis results for a specific vulnerability on a component (v1 format). Requires Read permission.",
        "tags": [
          "Contextual Analysis V1"
        ],
        "parameters": [
          {
            "name": "component_id",
            "in": "query",
            "required": true,
            "description": "The component identifier to check applicability for (e.g. gav://group:artifact, npm://package).",
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "vulnerability_id",
            "in": "query",
            "required": true,
            "description": "The vulnerability identifier (e.g. CVE-2021-44228).",
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "source_comp_id",
            "in": "query",
            "required": false,
            "description": "Source component ID (the SBOM package that the vulnerability originates from). If given, only a result matching that component will be returned. If not given, returned results will contain data for any component in the artifact.",
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "path",
            "in": "query",
            "required": false,
            "description": "Artifact path used to identify the specific artifact. Without this, results may be aggregated from several artifacts. Only relevant for artifacts (not builds or release bundles).",
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "user_issue_id",
            "in": "query",
            "required": false,
            "description": "User issue identifier to narrow down the specific artifact.",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Contextual analysis results returned successfully.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "scanner_available": {
                      "type": "boolean",
                      "description": "Whether the contextual analysis scanner is available."
                    },
                    "applicability": {
                      "type": "string",
                      "description": "Applicability status of the vulnerability."
                    },
                    "scan_status": {
                      "type": "string",
                      "description": "Current scan status."
                    },
                    "items": {
                      "type": "array",
                      "description": "List of applicability result items.",
                      "items": {
                        "type": "object"
                      }
                    }
                  }
                }
              }
            }
          },
          "204": {
            "description": "No content - no applicability data available."
          },
          "400": {
            "description": "Bad request - required fields are missing."
          },
          "500": {
            "description": "Internal server error."
          }
        }
      }
    }
  },
  "components": {
    "securitySchemes": {
      "basicAuth": {
        "type": "http",
        "scheme": "basic",
        "description": "Basic authentication using username/password or API key"
      }
    }
  },
  "tags": [
    {
      "name": "Contextual Analysis V1",
      "description": "APIs from Contextual Analysis V1"
    }
  ]
}
```