Microsoft’s MSRC entry for CVE-2025-61723 names the Go standard library package encoding/pem as vulnerable to a quadratic‑time parsing condition but explicitly ties Microsoft’s public product-level attestation to Azure Linux — and that attestation is a statement of inventory for that product...
