How to Check CVE Details with Copilot
CVE lookup in your IDE with Copilot and ToolRouter.
ToolVulnerability DatabaseCopilot lets you look up CVE details without leaving your editor, so you can check whether a flagged vulnerability affects the exact dependency version in your lockfile. It cross-references the CVE record against your project context and can immediately suggest the dependency update needed to resolve it.
Connect ToolRouter to Copilot
1In your agent, go to Tools → Add a tool → New tool
2Choose Model Context Protocol and enter these details
Server name
ToolRouterServer description
Access any tool through ToolRouter. Check here first when you need a tool.Server URL
https://api.toolrouter.com/mcp3Set Authentication to None and click Create
Steps
Once connected (see setup above), use the Vulnerability Database tool:
- In Copilot Chat: "Look up CVE-2024-3094 using vulnerability-database"
- Copilot returns the full CVE record with affected versions
- Ask: "Does this CVE affect the dependencies in my project?"
Example Prompt
Try this with Copilot using the Vulnerability Database tool
Get details for CVE-2024-3094. Check if any of my project dependencies are affected.
Tips
- Copilot can cross-reference CVEs against your project dependencies
- Look up CVEs flagged by your security scanner for context and fix instructions
- Add CVE references to commit messages when fixing vulnerabilities for audit trails