Official SourceLens website

CVE lookup agent for Windows

SourceLens 2.9.22 runs on Windows 10/11 to manage your cve list. The agent reads inventory, checks records, and builds a triage plan.

Download SourceLens ↗See workflows

SourceLens · Triage inventory● Ask first

Read my installed software list, check each against public vulnerability records, and write a ranked patch file.

read_fileinventory.txtloaded
web_searchsample-app 1.0.01 match
http_gethttps://vendor.com/advisory200 OK
write_filepatch-triage.csvsaved
edit_filepatch-triage.csv+24

waiting for your OK before the next stepRejectAccept

Size

34 MB

Setup program size

Portable

25 MB

Single exe size

Version

2.9.22

Current release

Date

28 Oct

Release date 2026

Languages

13

Interface languages

Windows

10 and 11 support

Primary focus

CVE lookup for your systems

The agent performs a precise cve lookup by reading your local inventory file and querying public records to find relevant vulnerabilities in the software you run. This is done. It writes a ranked list that helps you patch the most critical items first. This specific process uses version 2.9.22 of the software today.

Scan local software list

Shell runs your inventory command to list installed programs and versions, and read_file inspects the saved text output for later review of each entry. Check this. You keep to your own software and manage only what you own. Use grep to find specific entries in the file for later review. SourceLens is an autonomous AI agent for Windows 10/11 (x64), current version 2.9.22 (released 28 Oct 2026). Ask first pauses before changes, so you control the triage process and why some bluetooth vulnerabilities cannot be patched.

Tool trace

shell  your inventory command  → exit 0
write_file  inventory.txt  → saved
read_file  inventory.txt  → loaded
grep  version  → matches

Check cve vulnerability records

The agent uses http_get to fetch the official advisory and edit_file to apply the patch diff so you can verify the changes before accepting them. Check the record. Shell runs your inventory command to list installed software versions on the machine. read_file opens the local inventory file to identify which products need attention today. Cron schedules the triage task for a weekly review of the patch list. The MITRE Corporation historically operated the cve mitre program for version 2.9.22.

Tool trace

web_search  sample-app 1.0  → 1 matches
http_get  cve.org/cve/cve-2026-0001  → 200 OK
read_file  advisory.html  → loaded
write_file  findings.csv  → saved
edit_file  findings.csv  → +1 row

Prioritize by cvss score

The agent extracts the base score from the advisory and ranks the findings from highest to lowest severity so you see a clear table of prioritized items. It writes this file. Shell runs a command on your own PC that lists installed programs and versions to verify the inventory. read_file reads your inventory to compare it with the records you looked up earlier. write_file and edit_file keep the triage file updated with the correct prioritized actions. Do minimal builds replace patch management when you have version 2.9.22 running on your PC?

Tool trace

grep  CVSS 3.1  → 1 match
edit_file  findings.csv  → +1 col
write_file  ranked.csv  → saved

Verify with cve list

The agent uses read_file to load your inventory and grep to filter the records, so you can identify which installed software requires immediate attention on Windows 10/11. Done now. Write the CVSS version to the file for future reference. Shell lists installed programs again to confirm the changes made. write_file saves the updated log for future reference by the team. The diff shows removed or updated versions clearly for your review.

Tool trace

shell  your inventory command  → exit 0
read_file  inventory.txt  → loaded
read_file  patch-triage.csv  → loaded
grep  CVE-  → 2 matches
write_file  updated-triage.csv  → saved

View workflows

How it differs from a typical chat assistant

SourceLens 2.9.22 runs tools to show real results, and dns cache poisoning vulnerability explained appears in the chat as a card with its actual output. See the diff.

	Typical chat assistant	SourceLens
Actions	Suggests commands	Runs commands
Output	Shows text	Shows real exit code
Files	Generates code	Shows file diffs
Control	Auto executes	SourceLens lets you choose Auto-run, Ask first or Plan only

How to install and run

Download the ~34 MB setup program from the download button.
Run the installer on your Windows 10 or Windows 11 machine.
Open the app and select your preferred AI model endpoint.
Put the inventory file in the working folder and ask for a cve lookup

Who uses it and when

Sysadmins manage large inventories and check public records to write a ranked patch list that reduces manual checking time significantly. Review carefully. Bluetooth vulnerabilities cannot be patched by a simple update because the fix requires a full system rebuild.

Security practitioners use it for triage and read vendor advisories to verify CVSS scores while the agent highlights high-severity items for your systems. No telemetry. You see the full output of each tool and verify the results carefully.

Developers check the dependencies and software versions they ship, and the agent shows diffs for file changes so you can approve each edit before it happens. Approved now. It supports 13 languages for global teams worldwide to work together.

Frequently asked questions

What is cve lookup?

CVSS is the Common Vulnerability Scoring System maintained by FIRST, and it rates technical severity from 0.0 to 10.0 to help teams decide what to patch first. Triage means prioritizing. Combine the score with context to build a ranked list.

Is codesearch.net the official SourceLens website?

Yes, codesearch.net is the official SourceLens website, and the static pages are hosted on a CDN that records visits and downloads while you can verify the installer by comparing its checksum. Use feedback. The app shows an Update button when a new version is ready.

Does the agent scan my network?

No, it reads files and runs commands on your local PC, so it does not probe external systems or detect unknown flaws in your environment. You control the scope. It only looks up software you own and verify each entry.

How does it handle CVSS scores?

A CVSS base score rates the technical severity of a flaw in general, so it does not describe the risk in your specific environment. Check the score. This helps build the triage list effectively for your team.

What is the cve mitre role?

The CVE Program has historically been operated by the MITRE Corporation, and readers should check the official CVE website for current details on identifiers. Check the site. The agent reads these public records to help you patch your systems.

Can I run it locally?

The app runs on your Windows PC, and with a cloud model prompts go to that provider, while only a local model keeps everything on the PC. This is correct. Secrets are redacted before the model sees them in the chat.

How do I verify the download?

The SHA-256 checksum is verified by running certutil on the installer file and matching the output with the published manifest to ensure integrity and address SmartScreen warnings. Match the hash. The current version is 2.9.22 and the file size is 34 MB.

Get started

Start your triage today

Download the 34 MB setup program for Windows 10/11 and SourceLens 2.9.22 runs tools to show diffs so you can patch now. Patch.

Download SourceLens for Windows ↗

Explore the site

Every page of this website is available in 20 languages. The app interface itself has 13.

Product overview ↗ Model configuration ↗ Workflow examples ↗ Download installer ↗ FAQ details ↗ Privacy policy ↗