CVE Lens

Highlight a CVE, right-click, and look it up or send it to a free AI chat.

Open source (Apache-2.0): https://github.com/Nicholas-devsec/cve-lens CVE Lens turns a highlighted CVE (for example CVE-2021-44228) into instant lookups in public vulnerability databases, or an analyst prompt sent straight to an AI chat. It's built for security professionals, sysadmins, developers, and anyone who reads advisories. LOOK UP A CVE Highlight a CVE ID (or right-click a link containing one), choose CVE Lens > Look up, and pick a source. The sources cover official records, exploit and severity data, and advisories, including NVD, CVE.org and the CISA KEV catalog. "Open in all" opens every source in its own tab. ASK AN AI ABOUT A CVE Choose CVE Lens > Ask AI about this CVE and pick Google AI Mode, Ask Brave, ChatGPT, or Duck.ai. CVE Lens opens the site and sends an analyst prompt automatically, covering root cause, CVSS score and vector, exploit status, affected and fixed versions, mitigations, and sources. All four work on their anonymous free tiers, so no account is needed (availability and limits are set by each provider). To change the prompt, open the extension's options page and put {{cves}} where the CVE IDs should go. Your custom prompt stays on your device. PRIVATE BY DESIGN • No servers, accounts, analytics, or telemetry. • Only two permissions: context menus and local storage. • Never reads or changes web pages: no content scripts, no host access. • Page text never reaches a URL or prompt. Only validated CVE IDs are used, so a hostile page can't inject instructions into your AI chat. • No remote code. The only data that leaves your browser is the CVE ID and, for AI, the prompt, sent to the site you choose as part of its URL. CVE Lens is an independent project and is not affiliated with or endorsed by any of the services it links to.