Get one report

Fetch a single AI report with its full body and sources.

GET/api/v1/cves/{cveId}/reports/{reportId}

One report by id, with the complete report_text and its provenance chain — sources[] lists the predecessor reports it was built from. Use the reports list to discover the id, then fetch the body here. The reportId is re-validated against the CVE, so a report id cannot be pivoted onto another CVE.

Parameters

Name	In	Type	Description
`cveId`	path	string	CVE identifier.
`reportId`	path	string	Report UUID from the reports list.
`metadata`	query	boolean	Return metadata and provenance only, omitting the full report_text. Default: `false`.

Example request

curl "https://radicalnotion.ai/api/v1/cves/CVE-2025-55182/reports/7bfd3d67-bed2-4171-8e86-bf2977460556" \
  -H "Authorization: Bearer $RN_TOKEN"

Example response(report_text trimmed)

{
  "id": "7bfd3d67-bed2-4171-8e86-bf2977460556",
  "cve_id": "CVE-2025-55182",
  "report_type": "IT Discovery Instructions Update",
  "model": "gemini-3-pro-preview",
  "created_at": "2025-12-15T15:18:13Z",
  "char_count": 13032,
  "report_text": "# CVE-2025-55182 Vulnerability Verification Guide\n## React Server Components Remote Code Execution (React2Shell)\n\n---\n\n## Executive Summary\n\n**CVE-2025-55182** is a **CRITICAL** pre-authentication Remote Code Execution (RCE) vulnerability affecting React Server Components version 19.x. This vulnerability has been actively exploited by China-nexus threat actors and was added to CISA's Known Exploited Vulnerabilities (KEV) catalog on December 5th, 2025.\n\n**Business Impact:** Successful exploitatio…",
  "sources": []
}

Response schema

Field	Type	Description
`id`	string	Report UUID.
`cve_id`	string	CVE the report belongs to.
`report_type`	string	Report type (prompt_name).
`model`	string	Model that authored the report.
`created_at`	string	Generation timestamp (ISO 8601).
`char_count`	integer	Length of the body in characters.
`report_text`	string	The full report body (Markdown).
`sources[]`	object[]	Provenance chain — the predecessor reports this report was built from.

Responses

Status	Meaning
`200`	Success.
`400`	A path or query parameter failed validation.
`401`	Missing or invalid access token.
`403`	The CVE is outside your access tier.
`404`	No record exists for the CVE.
`429`	Rate limit exceeded.

Name

Type

Description

cveId

path

string

CVE identifier.

reportId

path

string

Report UUID from the reports list.

metadata

query

boolean

Return metadata and provenance only, omitting the full report_text. Default: false.

Example response(report_text trimmed)

{
  "id": "7bfd3d67-bed2-4171-8e86-bf2977460556",
  "cve_id": "CVE-2025-55182",
  "report_type": "IT Discovery Instructions Update",
  "model": "gemini-3-pro-preview",
  "created_at": "2025-12-15T15:18:13Z",
  "char_count": 13032,
  "report_text": "# CVE-2025-55182 Vulnerability Verification Guide\n## React Server Components Remote Code Execution (React2Shell)\n\n---\n\n## Executive Summary\n\n**CVE-2025-55182** is a **CRITICAL** pre-authentication Remote Code Execution (RCE) vulnerability affecting React Server Components version 19.x. This vulnerability has been actively exploited by China-nexus threat actors and was added to CISA's Known Exploited Vulnerabilities (KEV) catalog on December 5th, 2025.\n\n**Business Impact:** Successful exploitatio…",
  "sources": []
}

Response schema

Field	Type	Description
`id`	string	Report UUID.
`cve_id`	string	CVE the report belongs to.
`report_type`	string	Report type (prompt_name).
`model`	string	Model that authored the report.
`created_at`	string	Generation timestamp (ISO 8601).
`char_count`	integer	Length of the body in characters.
`report_text`	string	The full report body (Markdown).
`sources[]`	object[]	Provenance chain — the predecessor reports this report was built from.

Status

Meaning

200

Success.

400

A path or query parameter failed validation.

401

Missing or invalid access token.

403

The CVE is outside your access tier.

404

No record exists for the CVE.

429

Rate limit exceeded.