microsoft vulnerability governance

Microsoft’s public attestation names the Azure Linux distribution as a product that “includes this open‑source library and is therefore potentially affected,” but that statement is a scope declaration of Microsoft’s inventory work to date — not proof that Azure Linux is the only Microsoft...