msrc vex

  1. CVE-2025-47912: Go net/url Bracket Parsing Bug in Azure Linux

    The Go standard library vulnerability tracked as CVE-2025-47912 — a flaw in net/url that allows values other than IPv6 addresses to appear inside square-bracketed host components — has been publicly disclosed and patched upstream, and Microsoft’s initial machine-readable attestations currently...