artifact security

Microsoft’s terse advisory and the NVD entry for CVE‑2025‑37804 together tell a short, important story: the CVE identifier was later marked “Rejected” by the responsible authorities, yet Microsoft’s product‑level attestation naming Azure Linux as a carrier of the implicated open‑source component...