---
title: "Download package vulnerability findings from the Cloudsmith web app"
description: "Vulnerability and malicious package findings can now be exported as a JSON file directly from the web app."
canonical_url: "https://cloudsmith.com/changelog/download-package-vulnerability-findings-from-the-cloudsmith-web-app"
last_updated: "2026-09-14T10:11:13.749Z"
---
# Download package vulnerability findings from the Cloudsmith web app

Vulnerability and malicious package findings can now be exported as a JSON file directly from the web app. 

Select **Download vulnerability data **on a package’s **Overview** tab to export a JSON file containing every vulnerability and malicious package record currently matched to that package.

```json
{
  "_key": "dbcd07eb746c",
  "_type": "image",
  "alt": "The 'Download vulnerability data' option on a package's Overview tab.",
  "asset": {
    "_createdAt": "2026-09-14T09:32:45Z",
    "_id": "image-c40f077451d194926432b220e5e9a3834122cb2c-1201x647-png",
    "_rev": "aLex265EVEL6hUmlMsgDhy",
    "_type": "sanity.imageAsset",
    "_updatedAt": "2026-09-14T09:32:45Z",
    "assetId": "c40f077451d194926432b220e5e9a3834122cb2c",
    "extension": "png",
    "metadata": {
      "_type": "sanity.imageMetadata",
      "blurHash": "M7Sija^+9F~pRP?voeIVa#M{xvIWt6WV%2",
      "dimensions": {
        "_type": "sanity.imageDimensions",
        "aspectRatio": 1.8562596599690881,
        "height": 647,
        "width": 1201
      },
      "hasAlpha": true,
      "isOpaque": true,
      "lqip": "data:image/png;base64,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",
      "palette": {
        "_type": "sanity.imagePalette",
        "darkMuted": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#2c4854",
          "foreground": "#fff",
          "population": 0.01,
          "title": "#fff"
        },
        "darkVibrant": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#0e2738",
          "foreground": "#fff",
          "population": 0.05,
          "title": "#fff"
        },
        "dominant": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#0e2738",
          "foreground": "#fff",
          "population": 0.05,
          "title": "#fff"
        },
        "lightMuted": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#ca9c97",
          "foreground": "#000",
          "population": 0.01,
          "title": "#fff"
        },
        "lightVibrant": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#fce484",
          "foreground": "#000",
          "population": 0.01,
          "title": "#000"
        },
        "muted": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#44699c",
          "foreground": "#fff",
          "population": 0.01,
          "title": "#fff"
        },
        "vibrant": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#e6af36",
          "foreground": "#000",
          "population": 0.04,
          "title": "#fff"
        }
      },
      "thumbHash": "/fcBBIALX12HdHVLeWZvk9AIdw=="
    },
    "mimeType": "image/png",
    "originalFilename": "downloadPackageVulnData.png",
    "path": "images/rafvlnhi/production/c40f077451d194926432b220e5e9a3834122cb2c-1201x647.png",
    "sha1hash": "c40f077451d194926432b220e5e9a3834122cb2c",
    "size": 117330,
    "uploadId": "177157a8b257d1360565cc8429bc8a355ef6aac1",
    "url": "https://cdn.sanity.io/images/rafvlnhi/production/c40f077451d194926432b220e5e9a3834122cb2c-1201x647.png"
  },
  "caption": "The 'Download vulnerability data' option on a package's Overview tab.",
  "link": {
    "_type": "link",
    "href": null,
    "openInNewTab": false
  },
  "markDefs": null
}
```

Package vulnerability data is also available from the [Packages Vulnerabilities List](https://docs.cloudsmith.com/api/packages/vulnerabilities/list) API endpoint.  
  
Vulnerability and malicious package detection is available on Ultra and Enterprise plans.