Validates that the requested feed exists and returns pre-signed S3 download URLs for the feed's backup zip. Four URLs are returned: a multi-region access point URL (url_mrap) and direct regional bucket URLs for US (url_us-east-1), UK (url_eu-west-2), and Australia (url_ap-southeast-2). All URLs expire after 15 minutes.
The V3 equivalent is /v3/backup/{index}, which returns a download link for a V3 index backup.
The advisory feed name (e.g. ghsa). Use /v4/backup to retrieve the list of available feeds.
curl --request GET \
--url 'https://api.vulncheck.com/v4/backup/ghsa' \
--header 'Accept: application/json' \
--header 'Authorization: Bearer insert_token_here'
The feed name that was requested.
Whether a backup zip exists for this feed.
Pre-signed multi-region access point URL for downloading the backup zip. Automatically routes to the nearest region.
Pre-signed direct S3 URL for the US East (N. Virginia) regional bucket.
Pre-signed direct S3 URL for the Europe (London) regional bucket.
Pre-signed direct S3 URL for the Asia Pacific (Sydney) regional bucket.
UTC timestamp when the pre-signed URLs expire.
Time-to-live for the pre-signed URLs in minutes.
SHA256 hex digest of the backup zip, if available.
| Status Code | Meaning |
|---|---|
| 401 | Missing or invalid authentication token |
| 404 | Feed not found |
| 503 | Backup service unavailable |
{
"feed": "ghsa",
"available": true,
"url_mrap": "https://mrap.accesspoint.s3.amazonaws.com/v4DataBackups/ghsa.zip?...",
"url_us-east-1": "https://s3.us-east-1.amazonaws.com/vcnova-data-full.../v4DataBackups/ghsa.zip?...",
"url_eu-west-2": "https://s3.eu-west-2.amazonaws.com/vclon-data-full.../v4DataBackups/ghsa.zip?...",
"url_ap-southeast-2": "https://s3.ap-southeast-2.amazonaws.com/vcsyd-data-full.../v4DataBackups/ghsa.zip?...",
"url_expires": "2026-03-20T12:15:00Z",
"url_ttl_minutes": 15,
"sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
}