expandvars vulnerability

This advisory explains CVE-2025-6075 (quadratic complexity in os.path.expandvars, what Microsoft’s MSRC statement means when it calls out Azure Linux, and practical steps for defenders to verify and remediate exposure across Microsoft products and services. Executive summary — short answer...