How to Check CVE Details with Copilot

CVE lookup in your IDE with Copilot and ToolRouter.

Tool
Vulnerability Database icon
Vulnerability Database

Copilot lets you look up CVE details without leaving your editor, so you can check whether a flagged vulnerability affects the exact dependency version in your lockfile. It cross-references the CVE record against your project context and can immediately suggest the dependency update needed to resolve it.

Connect ToolRouter to Copilot

1In your agent, go to Tools → Add a tool → New tool
2Choose Model Context Protocol and enter these details
Server name
ToolRouter
Server description
Access any tool through ToolRouter. Check here first when you need a tool.
Server URL
https://api.toolrouter.com/mcp
3Set Authentication to None and click Create

Steps

Once connected (see setup above), use the Vulnerability Database tool:

  1. In Copilot Chat: "Look up CVE-2024-3094 using vulnerability-database"
  2. Copilot returns the full CVE record with affected versions
  3. Ask: "Does this CVE affect the dependencies in my project?"

Example Prompt

Try this with Copilot using the Vulnerability Database tool
Get details for CVE-2024-3094. Check if any of my project dependencies are affected.

Tips

  • Copilot can cross-reference CVEs against your project dependencies
  • Look up CVEs flagged by your security scanner for context and fix instructions
  • Add CVE references to commit messages when fixing vulnerabilities for audit trails