> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cybedefend.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Batch update multiple vulnerabilities

> Update status, priority, and/or comment for multiple vulnerabilities at once. Maximum 100 vulnerabilities per request.



## OpenAPI

````yaml patch /project/{projectId}/results/batch
openapi: 3.0.0
info:
  title: Cybedefend API
  description: >-
    CybeDefend is an advanced API for application security analysis. Key
    features include OAuth 2.0 authentication, user/organization/project
    management, and REBAC-based permissions. It excels in static, dynamic, and
    IaC security analyses (SAST, DAST, IaC, etc.).
  version: '1.0'
  contact: {}
servers:
  - url: https://api-eu.cybedefend.com
    description: EU
  - url: https://api-us.cybedefend.com
    description: US
security: []
tags: []
paths:
  /project/{projectId}/results/batch:
    patch:
      tags:
        - Results & Vulnerabilities
      summary: Batch update multiple vulnerabilities
      description: >-
        Update status, priority, and/or comment for multiple vulnerabilities at
        once. Maximum 100 vulnerabilities per request.
      operationId: ResultController_batchUpdate
      parameters:
        - name: projectId
          required: true
          in: path
          schema:
            format: uuid
            type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BatchUpdateVulnerabilitiesBodyDto'
      responses:
        '200':
          description: Batch update results with success/failure per vulnerability
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BatchUpdateVulnerabilitiesResponseDto'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorDto'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                example:
                  message: Unauthorized
                  statusCode: 401
                  timestamp: '2025-02-18T12:31:18.491Z'
                  path: /example/path
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                example:
                  message: Forbidden
                  statusCode: 403
                  timestamp: '2025-02-18T12:31:18.491Z'
                  path: /example/path
components:
  schemas:
    BatchUpdateVulnerabilitiesBodyDto:
      type: object
      properties:
        items:
          description: >-
            List of vulnerabilities to update. Each item must contain
            vulnerabilityId and at least one field to update (status, priority,
            or comment).
          minItems: 1
          maxItems: 100
          example:
            - vulnerabilityId: 69da14be-ce56-46d1-8da0-25927da0876f
              status: ignored
              comment: Reviewed and marked as ignored
            - vulnerabilityId: a1b2c3d4-e5f6-7890-abcd-ef1234567890
              status: resolved
          type: array
          items:
            $ref: '#/components/schemas/BatchUpdateVulnerabilityItemDto'
      required:
        - items
    BatchUpdateVulnerabilitiesResponseDto:
      type: object
      properties:
        projectId:
          type: string
          description: Project unique identifier
          format: uuid
          example: 30244c51-b01b-4306-a1e5-ade3f87303ff
        totalCount:
          type: number
          description: Total number of vulnerabilities processed
          example: 5
        successCount:
          type: number
          description: Number of successful updates
          example: 4
        failureCount:
          type: number
          description: Number of failed updates
          example: 1
        results:
          description: Detailed results per vulnerability
          example:
            - vulnerabilityId: 69da14be-ce56-46d1-8da0-25927da0876f
              success: true
            - vulnerabilityId: a1b2c3d4-e5f6-7890-abcd-ef1234567890
              success: false
              error: Vulnerability not found
          type: array
          items:
            $ref: '#/components/schemas/BatchUpdateResultItemDto'
      required:
        - projectId
        - totalCount
        - successCount
        - failureCount
        - results
    ErrorDto:
      type: object
      properties:
        timestamp:
          type: string
          example: '2025-02-18T12:31:18.491Z'
          description: Timestamp of the error
        service:
          type: string
          example: AiService
          description: Name of the service where the error occurred
        method:
          type: string
          example: startConversation
          description: Method name where the error occurred
        message:
          type: string
          example: Invalid parameters provided
          description: Error message
        code:
          type: number
          example: 400
          description: HTTP status code
          minimum: 100
          maximum: 599
      required:
        - timestamp
        - service
        - method
        - message
        - code
    BatchUpdateVulnerabilityItemDto:
      type: object
      properties:
        vulnerabilityId:
          type: string
          description: Vulnerability unique identifier
          format: uuid
          example: 69da14be-ce56-46d1-8da0-25927da0876f
        status:
          type: string
          description: New status of the vulnerability
          enum:
            - to_verify
            - resolved
            - confirmed
            - ignored
          example: ignored
        priority:
          type: string
          description: New priority level
          enum:
            - critical_urgent
            - urgent
            - normal
            - low
            - very_low
          example: urgent
        comment:
          type: string
          description: Comment about the vulnerability (max 512 chars)
          maxLength: 512
          example: Marked as ignored after security review
      required:
        - vulnerabilityId
    BatchUpdateResultItemDto:
      type: object
      properties:
        vulnerabilityId:
          type: string
          description: Vulnerability unique identifier
          format: uuid
          example: 69da14be-ce56-46d1-8da0-25927da0876f
        success:
          type: boolean
          description: Whether the update was successful
          example: true
        error:
          type: string
          description: Error message if the update failed
          example: Vulnerability not found
      required:
        - vulnerabilityId
        - success

````