Skip to main content

Invalid advisory

typehttps://docs.frem.sh/reference/api/errors/invalid-advisory
HTTP status400 Bad Request

What it means

A field of the security advisory you sent, or the state filter of the list, is refused. detail names the field and says why.

Example detail messages returned with this error:

  • Give a one-line title of at most 200 characters.
  • “> 1.0.0” is not a constraint: use >=, <, <= or = and a version.
  • The CVSS vector must be a complete CVSS:3.1 or CVSS:4.0 base vector.
  • state is one of draft, published, closed, withdrawn.

What to do

Correct the field detail names and send the request again. Vulnerable versions take one or two constraints with >=, <, <= or =; > is refused because OSV has no exclusive lower bound.

Response shape

All fremforge API errors are RFC 9457 problem+json:

{
  "type": "https://docs.frem.sh/reference/api/errors/invalid-advisory",
  "title": "Bad Request",
  "status": 400,
  "detail": "..."
}

Branch on type, not on title or detail - those are human-readable and may be reworded.

Invalid accessInvalid advisory credit