artifact verification

Microsoft’s wording that “Azure Linux includes this open‑source library and is therefore potentially affected” is an authoritative, product‑level attestation for that distro — but it is not a categorical statement that no other Microsoft product ships the same vulnerable component. Background /...

Microsoft’s Security Update Guide records CVE-2025-59288 as a real, vendor-acknowledged vulnerability in the Playwright toolchain that stems from improper verification of cryptographic signatures, and the advisory assigns a Medium severity rating (CVSS 3.1 base score 5.3). Background / Overview...