Method create

vulnerabilities/api_v3.py:260–339

(self, request, *args, **kwargs)

    @extend_schema(request=PackageQuerySerializer)
    def create(self, request, *args, **kwargs):
        serializer = PackageQuerySerializer(data=request.data)
        serializer.is_valid(raise_exception=True)

        purls = serializer.validated_data["purls"]
        details = serializer.validated_data["details"]
        reachability = serializer.validated_data["reachability"]
        ignore_qualifiers_subpath = serializer.validated_data["ignore_qualifiers_subpath"]
        max_advisories = serializer.validated_data["max_advisories"]

        if not purls:
            query = PackageV2.objects.all_vulnerable_purls().order_by("package_url")
            page = self.paginate_queryset(query)
            return self.get_paginated_response(page)

        plain_purls = None

        if ignore_qualifiers_subpath:
            plain_purls = [
                str(
                    PackageURL(
                        type=p.type,
                        namespace=p.namespace,
                        name=p.name,
                        version=p.version,
                    )
                )
                for p in map(PackageURL.from_string, purls)
            ]

        if not details:
            affecting_exists = ImpactedPackageAffecting.objects.filter(
                package_id=OuterRef("pk"),
                impacted_package__advisory___all_impacts_unfurled_at__isnull=False,
                impacted_package__advisory__is_latest=True,
            )
            # Return back vulnerable PURLs only
            if ignore_qualifiers_subpath:
                query = (
                    PackageV2.objects.filter_plain_purls(plain_purls)
                    .values_list("plain_package_url", flat=True)
                    .order_by("plain_package_url")
                )
            else:
                query = (
                    PackageV2.objects.filter_purls(purls)
                    .order_by("package_url")
                    .values_list("package_url", flat=True)
                )

            query = query.annotate(
                is_vulnerable=Exists(affecting_exists),
            ).filter(is_vulnerable=True)

            page = self.paginate_queryset(query)
            return self.get_paginated_response(page)

        if ignore_qualifiers_subpath: