curl --request GET \
  --url https://app.cysmiq.com/api/v1/{tenant_slug}/vulnerabilities \
  --header 'Authorization: Bearer <token>'

{
  "repository": {
    "id": "repo_01hxyz",
    "full_name": "acme/widgets"
  },
  "reference": {
    "ref": "main",
    "sha": "a1b2c3d4"
  },
  "scan": {
    "id": "scan_01hxyz",
    "status": "completed",
    "finished_at": "2026-01-14T17:45:00Z"
  },
  "filters": {
    "confirmed": true,
    "triaged": null,
    "severity": [
      "high"
    ],
    "type": [
      "dependency"
    ]
  },
  "summary": {
    "total": 2,
    "by_severity": {
      "high": 2
    },
    "by_type": {
      "dependency": 2
    }
  },
  "items": [
    {
      "id": "vc_01hxyz",
      "title": "Prototype Pollution in lodash",
      "severity": "high",
      "type": "dependency",
      "status": "open",
      "resolution": null,
      "confirmed": true,
      "triaged": false,
      "introduced_at": "2026-01-10T09:14:00Z",
      "vulnerable_at": "2026-01-10T09:14:00Z",
      "exploitable_at": null,
      "location": {
        "path": "package-lock.json",
        "line": 142
      }
    }
  ],
  "next_cursor": null
}