Product Release Advisory - Tanzu Platform for Cloud Foundry 10.2.1+LTS-T
35969
24 July 2025
24 July 2025
CLOSED
CRITICAL
9.9
N/A
See CVE list in advisory
Product Release Advisory - Tanzu Platform for Cloud Foundry 10.2.1+LTS-T
|
Advisory Details |
|
|
Severity |
Critical |
|
CVSSv3 Range |
9.9 |
|
CVSSv3 Vector |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
|
Issue Date |
2025-07-24 |
|
Updated on |
Product Version Release Advisory
- Product Release Tanzu Platform for Cloud Foundry 10.2.1+LTS-T
- Product Release Notes: https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/tanzu-platform-for-cloud-foundry/10-2/tpcf/runtime-rn.html#10.2.1
Security Fixes This release has the following security fixes, listed by component and area.
|
Component |
Vulnerabilities Resolved |
|
web-servers-cnb-buildpack java-native-image-cnb-buildpack |
GHSA-v23v-6jw2-98fq (CVE-2024-41110) (Critical) |
|
java-native-image-cnb-buildpack tanzu-jammy-stack |
CVE-2023-29402 (Critical) |
|
tanzu-jammy-stack |
CVE-2022-32207 (Critical) |
|
java-native-image-cnb-buildpack tanzu-jammy-stack web-servers-cnb-buildpack |
CVE-2023-24531 (Critical) |
|
uaa |
GHSA-4wrc-f8pq-fpqp (CVE-2016-1000027) (Critical) |
|
java-native-image-cnb-buildpack |
CVE-2023-24538 (Critical) |
|
tanzu-jammy-stack |
CVE-2022-32221 (Critical) |
|
java-native-image-cnb-buildpack tanzu-jammy-stack |
CVE-2023-29405 (Critical) |
|
tanzu-jammy-stack |
CVE-2022-1292 (Critical) |
|
java-native-image-cnb-buildpack tanzu-jammy-stack |
CVE-2023-29404 (Critical) |
|
tanzu-jammy-stack |
CVE-2022-2068 (Critical) |
|
web-servers-cnb-buildpack |
GHSA-v725-9546-7q7m (CVE-2025-21613) (Critical) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack web-servers-cnb-buildpack |
CVE-2024-24790 (Critical) |
|
java-native-image-cnb-buildpack |
CVE-2023-24540 (Critical) |
|
tanzu-jammy-stack |
CVE-2025-4517 (Critical) |
|
web-servers-cnb-buildpack java-native-image-cnb-buildpack tanzu-jammy-stack |
GHSA-v778-237x-gjrc (CVE-2024-45337) (Critical) |
|
tanzu-jammy-stack |
CVE-2024-5535 (Critical) |
|
tanzu-jammy-stack |
CVE-2023-23914 (Critical) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack web-servers-cnb-buildpack |
CVE-2025-22871 (Critical) |
|
tanzu-jammy-stack |
CVE-2023-27534 (High) |
|
tanzu-jammy-stack |
CVE-2023-27533 (High) |
|
tanzu-jammy-stack |
CVE-2022-1271 (High) |
|
tanzu-jammy-stack |
CVE-2024-8088 (High) |
|
tanzu-jammy-stack |
CVE-2024-2398 (High) |
|
java-native-image-cnb-buildpack uaa |
CVE-2025-50059 (High) |
|
tanzu-jammy-stack |
CVE-2024-53427 (High) |
|
tanzu-jammy-stack |
CVE-2022-42915 (High) |
|
tanzu-jammy-stack |
CVE-2022-22576 (High) |
|
uaa java-native-image-cnb-buildpack |
CVE-2025-50106 (High) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack tanzu-jammy-stack |
CVE-2023-39323 (High) |
|
web-servers-cnb-buildpack java-native-image-cnb-buildpack |
GHSA-7vpp-9cxj-q8gv (CVE-2025-3445) (High) |
|
uaa java-native-image-cnb-buildpack |
CVE-2025-30749 (High) |
|
tanzu-jammy-stack |
GHSA-36jr-mh4h-2g58 (No known CVE) (High) |
|
java-native-image-cnb-buildpack |
GHSA-66x3-6cw3-v5gj (CVE-2022-29173) (High) |
|
tanzu-jammy-stack |
CVE-2023-4807 (High) |
|
tanzu-jammy-stack |
CVE-2023-6597 (High) |
|
tanzu-jammy-stack |
CVE-2024-9287 (High) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack |
CVE-2023-29403 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-30580 (High) |
|
java-native-image-cnb-buildpack |
CVE-2023-45287 (High) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack |
GHSA-mh63-6h87-95cp (CVE-2025-30204) (High) |
|
tanzu-jammy-stack |
CVE-2023-0215 (High) |
|
tanzu-jammy-stack web-servers-cnb-buildpack |
CVE-2023-39325 (High) |
|
tanzu-jammy-stack |
CVE-2022-1473 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-30634 (High) |
|
java-native-image-cnb-buildpack |
GHSA-69cg-p879-7622 (CVE-2022-27664) (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-30630 (High) |
|
tanzu-jammy-stack |
CVE-2022-3996 (High) |
|
tanzu-jammy-stack |
CVE-2024-4741 (High) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack |
GHSA-vvpx-j8f3-3w6h (CVE-2022-41723) (High) |
|
web-servers-cnb-buildpack java-native-image-cnb-buildpack tanzu-jammy-stack |
CVE-2024-34158 (High) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack tanzu-jammy-stack |
CVE-2024-34156 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-29804 (High) |
|
tanzu-jammy-stack |
CVE-2023-0217 (High) |
|
java-native-image-cnb-buildpack |
GHSA-69ch-w2m2-3vjp (CVE-2022-32149) (High) |
|
tanzu-jammy-stack |
CVE-2025-4435 (High) |
|
java-native-image-cnb-buildpack |
GHSA-78wr-2p64-hpwj (CVE-2024-47554) (High) |
|
tanzu-jammy-stack |
CVE-2022-27780 (High) |
|
java-native-image-cnb-buildpack |
GHSA-232p-vwff-86mp (CVE-2023-28840) (High) |
|
java-native-image-cnb-buildpack |
GHSA-2h5h-59f5-c5x9 (CVE-2023-30551) (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-30635 (High) |
|
tanzu-jammy-stack |
CVE-2025-48060 (High) |
|
web-servers-cnb-buildpack java-native-image-cnb-buildpack |
GHSA-6v2p-p543-phr9 (CVE-2025-22868) (High) |
|
tanzu-jammy-stack |
CVE-2024-6232 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-41724 (High) |
|
tanzu-jammy-stack |
CVE-2024-6119 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-24675 (High) |
|
tanzu-jammy-stack |
CVE-2025-4138 (High) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack tanzu-jammy-stack |
CVE-2023-45283 (High) |
|
tanzu-jammy-stack web-servers-cnb-buildpack java-native-image-cnb-buildpack |
CVE-2023-45288 (High) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack tanzu-jammy-stack |
CVE-2023-44487 (High) |
|
web-servers-cnb-buildpack tanzu-jammy-stack java-native-image-cnb-buildpack |
CVE-2024-24784 (High) |
|
java-native-image-cnb-buildpack |
CVE-2023-24536 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-2879 (High) |
|
tanzu-jammy-stack |
CVE-2025-4330 (High) |
|
tanzu-jammy-stack |
CVE-2022-3786 (High) |
|
tanzu-jammy-stack |
CVE-2022-3602 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-27664 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-41725 (High) |
|
uaa |
GHSA-g5vr-rgqm-vf78 (CVE-2024-38819) (High) |
|
java-native-image-cnb-buildpack |
GHSA-m425-mq94-257g (No known CVE) (High) |
|
uaa |
GHSA-cx7f-g6mp-7hqm (CVE-2024-38816) (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-24921 (High) |
|
tanzu-jammy-stack |
CVE-2022-27775 (High) |
|
tanzu-jammy-stack |
CVE-2023-5363 (High) |
|
tanzu-jammy-stack |
CVE-2023-0401 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-30633 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-28131 (High) |
|
tanzu-jammy-stack |
CVE-2022-42916 (High) |
|
tanzu-jammy-stack |
CVE-2022-27781 (High) |
|
java-native-image-cnb-buildpack |
CVE-2023-24534 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-41723 (High) |
|
web-servers-cnb-buildpack |
GHSA-r9px-m959-cxf4 (CVE-2025-21614) (High) |
|
web-servers-cnb-buildpack java-native-image-cnb-buildpack |
GHSA-8r3f-844c-mc37 (CVE-2024-24786) (High) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack |
GHSA-4374-p667-p6c8 (CVE-2023-39325) (High) |
|
java-native-image-cnb-buildpack |
GHSA-8c26-wmh5-6g9v (CVE-2022-27191) (High) |
|
web-servers-cnb-buildpack tanzu-jammy-stack java-native-image-cnb-buildpack |
CVE-2024-24791 (High) |
|
tanzu-jammy-stack |
CVE-2024-4032 (High) |
|
tanzu-jammy-stack |
CVE-2022-4450 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-28327 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-41720 (High) |
|
tanzu-jammy-stack |
CVE-2022-27782 (High) |
|
tanzu-jammy-stack |
CVE-2023-28319 (High) |
|
java-native-image-cnb-buildpack |
GHSA-cg3q-j54f-5p7p (CVE-2022-21698) (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-2880 (High) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack tanzu-jammy-stack |
CVE-2023-45285 (High) |
|
tanzu-jammy-stack |
CVE-2022-43551 (High) |
|
tanzu-jammy-stack |
CVE-2023-0464 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-30631 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-30632 (High) |
|
tanzu-jammy-stack |
CVE-2023-36632 (High) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack web-servers-cnb-buildpack |
GHSA-hcg3-q754-cr77 (CVE-2025-22869) (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-41715 (High) |
|
tanzu-jammy-stack |
CVE-2023-0216 (High) |
|
java-native-image-cnb-buildpack |
CVE-2023-24537 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-32189 (High) |
|
java-native-image-cnb-buildpack |
GHSA-hqxw-f8mx-cpmw (CVE-2023-2253) (High) |
|
tanzu-jammy-stack |
CVE-2022-3358 (High) |
|
java-native-image-cnb-buildpack |
GHSA-hp87-p4gw-j4gq (CVE-2022-28948) (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-41722 (High) |
|
java-native-image-cnb-buildpack |
CVE-2022-41716 (High) |
|
tanzu-jammy-stack |
CVE-2024-7592 (High) |
|
tanzu-jammy-stack |
CVE-2024-0397 (High) |
|
uaa |
GHSA-mg83-c7gq-rv5c (CVE-2025-22228) (High) |
|
java-native-image-cnb-buildpack |
CVE-2024-21147 (High) |
|
tanzu-jammy-stack |
CVE-2023-0286 (High) |
|
java-native-image-cnb-buildpack |
CVE-2025-21587 (High) |
|
java-native-image-cnb-buildpack |
CVE-2023-24539 (High) |
|
tanzu-jammy-stack |
CVE-2025-0725 (High) |
|
java-native-image-cnb-buildpack |
CVE-2023-29400 (High) |
|
uaa |
GHSA-rc42-6c7j-7h5r (CVE-2025-22235) (High) |
|
java-native-image-cnb-buildpack |
GHSA-6wxm-mpqj-6jpf (CVE-2024-45339) (High) |
|
java-native-image-cnb-buildpack |
GHSA-vmq6-5m68-f53m (CVE-2023-6378) (High) |
|
tanzu-jammy-stack |
CVE-2024-4030 (High) |
|
java-native-image-cnb-buildpack |
GHSA-vjxv-45g9-9296 (CVE-2022-35929) (High) |
|
web-servers-cnb-buildpack java-native-image-cnb-buildpack |
GHSA-xw73-rw38-6vjc (CVE-2024-24557) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-33pg-m6jh-5237 (CVE-2023-28841) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-6wrf-mxfj-pf5p (CVE-2023-28842) (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack web-servers-cnb-buildpack |
CVE-2025-4673 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-9681 (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2022-32148 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-2650 (Medium) |
|
java-native-image-cnb-buildpack tanzu-jammy-stack |
CVE-2023-29406 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-6129 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-46218 (Medium) |
|
tanzu-jammy-stack |
CVE-2022-27776 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-7264 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-23916 (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack web-servers-cnb-buildpack |
CVE-2023-45290 (Medium) |
|
uaa java-native-image-cnb-buildpack |
GHSA-j288-q9x7-2f5v (CVE-2025-48924) (Medium) |
|
tanzu-jammy-stack |
CVE-2023-23915 (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2022-1705 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-23337 (Medium) |
|
tanzu-jammy-stack |
CVE-2022-32206 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-8096 (Medium) |
|
web-servers-cnb-buildpack tanzu-jammy-stack java-native-image-cnb-buildpack |
CVE-2024-24787 (Medium) |
|
tanzu-jammy-stack |
CVE-2025-0938 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-47611 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-0450 (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack web-servers-cnb-buildpack |
CVE-2024-45341 (Medium) |
|
web-servers-cnb-buildpack tanzu-jammy-stack java-native-image-cnb-buildpack |
CVE-2023-39318 (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack |
GHSA-2wrh-6pvc-2jm9 (CVE-2023-3978) (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack web-servers-cnb-buildpack |
CVE-2023-39319 (Medium) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack |
GHSA-rhh4-rh7c-7r5v (CVE-2024-0406) (Medium) |
|
tanzu-jammy-stack web-servers-cnb-buildpack java-native-image-cnb-buildpack |
CVE-2024-45336 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-jq35-85cj-fj4p (No known CVE) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-pr98-23f8-jwxv (CVE-2024-12798) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-vrpq-qp53-qv56 (CVE-2025-4949) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-v6v8-xj6m-xwqh (CVE-2024-6104) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-7ww5-4wqc-m92c (No known CVE) (Medium) |
|
java-native-image-cnb-buildpack tanzu-jammy-stack web-servers-cnb-buildpack |
GHSA-vvgc-356p-c3xw (CVE-2025-22872) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-2mm7-x5h6-5pvq (CVE-2022-24769) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-v435-xc8x-wvr9 (CVE-2024-30171) (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2025-30761 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-6237 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-2326-hx7g-3m9r (CVE-2024-41909) (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack |
GHSA-45x7-px36-x8w8 (CVE-2023-48795) (Medium) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack tanzu-jammy-stack |
CVE-2024-24783 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-2511 (Medium) |
|
tanzu-jammy-stack |
CVE-2025-4516 (Medium) |
|
tanzu-jammy-stack |
CVE-2022-43552 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-4g9r-vxhx-9pgx (CVE-2024-25710) (Medium) |
|
tanzu-jammy-stack |
CVE-2022-32208 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-50602 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-28321 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-mq39-4gv4-mvpx (CVE-2024-29018) (Medium) |
|
tanzu-jammy-stack |
CVE-2022-4304 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-1255 (Medium) |
|
tanzu-jammy-stack |
CVE-2022-1434 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-28320 (Medium) |
|
tanzu-jammy-stack |
CVE-2022-27774 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-2qjp-425j-52j9 (CVE-2022-23471) (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2025-30698 (Medium) |
|
tanzu-jammy-stack |
CVE-2021-3995 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-8gw7-4j42-w388 (CVE-2022-36056) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-wjxj-5m7g-mg7q (CVE-2023-33202) (Medium) |
|
tanzu-jammy-stack |
CVE-2024-0727 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-7g45-4rm6-3mm3 (CVE-2023-2976) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-259w-8hf6-59c2 (CVE-2023-25153) (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2022-1962 (Medium) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack tanzu-jammy-stack |
CVE-2024-24789 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-6923 (Medium) |
|
tanzu-jammy-stack |
CVE-2020-22916 (Medium) |
|
web-servers-cnb-buildpack tanzu-jammy-stack java-native-image-cnb-buildpack |
CVE-2025-0913 (Medium) |
|
tanzu-jammy-stack |
CVE-2021-3996 (Medium) |
|
tanzu-jammy-stack |
CVE-2022-0563 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-4265-ccf5-phj5 (CVE-2024-26308) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-5ffw-gxpp-mxpf (CVE-2022-31030) (Medium) |
|
web-servers-cnb-buildpack java-native-image-cnb-buildpack tanzu-jammy-stack |
CVE-2024-24785 (Medium) |
|
tanzu-jammy-stack web-servers-cnb-buildpack java-native-image-cnb-buildpack |
GHSA-4v7x-pqxf-cx7m (CVE-2023-45288) (Medium) |
|
tanzu-jammy-stack |
CVE-2023-40217 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-3817 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-rc4r-wh2q-q6c4 (CVE-2022-36109) (Medium) |
|
tanzu-jammy-stack |
CVE-2023-2975 (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2022-29526 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-xrjj-mj9h-534m (CVE-2022-41717) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-frqx-jfcm-6jjr (CVE-2023-33199) (Medium) |
|
tanzu-jammy-stack |
CVE-2024-4603 (Medium) |
|
uaa |
GHSA-4gc7-5j7h-4qph (CVE-2024-38820) (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack |
GHSA-qppj-fm5r-hxr3 (CVE-2023-44487) (Medium) |
|
tanzu-jammy-stack |
CVE-2023-3446 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-27043 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-hmfx-3pcx-653p (CVE-2023-25173) (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2023-24532 (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack |
GHSA-p782-xgp4-8hr8 (CVE-2022-29526) (Medium) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack |
GHSA-hpxr-w9w7-g4gv (CVE-2024-24579) (Medium) |
|
tanzu-jammy-stack |
CVE-2024-12718 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-5678 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-hr8g-6v94-x4m9 (CVE-2023-33201) (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack |
CVE-2023-29409 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-0466 (Medium) |
|
uaa |
GHSA-w3c8-7r8f-9jp8 (CVE-2024-38828) (Medium) |
|
tanzu-jammy-stack |
CVE-2022-2097 (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack web-servers-cnb-buildpack |
CVE-2023-39326 (Medium) |
|
tanzu-jammy-stack |
CVE-2023-0465 (Medium) |
|
tanzu-jammy-stack |
CVE-2022-1343 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-8xfc-gm6g-vgpv (CVE-2024-29857) (Medium) |
|
tanzu-jammy-stack java-native-image-cnb-buildpack web-servers-cnb-buildpack |
CVE-2023-45284 (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2022-41717 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-3219 (Medium) |
|
tanzu-jammy-stack |
CVE-2022-4203 (Medium) |
|
java-native-image-cnb-buildpack uaa |
CVE-2025-30754 (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2025-30691 (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2024-21145 (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2024-21235 (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2025-21502 (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2024-21140 (Medium) |
|
web-servers-cnb-buildpack java-native-image-cnb-buildpack |
GHSA-265r-hfxg-fhmg (CVE-2024-40635) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-269g-pwp5-87pp (CVE-2020-15250) (Medium) |
|
java-native-image-cnb-buildpack tanzu-jammy-stack web-servers-cnb-buildpack |
GHSA-qxp5-gwg8-xv66 (CVE-2025-22870) (Medium) |
|
web-servers-cnb-buildpack tanzu-jammy-stack java-native-image-cnb-buildpack |
CVE-2023-45289 (Medium) |
|
tanzu-jammy-stack |
CVE-2024-9143 (Medium) |
|
tanzu-jammy-stack |
CVE-2025-6069 (Medium) |
|
web-servers-cnb-buildpack java-native-image-cnb-buildpack tanzu-jammy-stack |
CVE-2024-34155 (Medium) |
|
tanzu-jammy-stack |
CVE-2022-32205 (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-p53j-g8pw-4w5f (CVE-2020-36843) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-c5q2-7r4c-mv6g (CVE-2024-28180) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-95pr-fxf5-86gv (CVE-2024-29903) (Medium) |
|
java-native-image-cnb-buildpack |
GHSA-88jx-383q-w4qc (CVE-2024-29902) (Medium) |
|
tanzu-jammy-stack |
CVE-2024-13176 (Medium) |
|
web-servers-cnb-buildpack tanzu-jammy-stack java-native-image-cnb-buildpack |
CVE-2025-22866 (Medium) |
|
java-native-image-cnb-buildpack |
CVE-2024-21131 (Low) |
|
java-native-image-cnb-buildpack |
CVE-2024-21094 (Low) |
|
java-native-image-cnb-buildpack |
CVE-2024-21138 (Low) |
|
java-native-image-cnb-buildpack |
CVE-2024-21011 (Low) |
|
tanzu-jammy-stack |
CVE-2024-11168 (Low) |
|
java-native-image-cnb-buildpack |
CVE-2024-21012 (Low) |
|
java-native-image-cnb-buildpack |
CVE-2024-21068 (Low) |
|
java-native-image-cnb-buildpack |
CVE-2024-21217 (Low) |
|
java-native-image-cnb-buildpack |
CVE-2024-21085 (Low) |
|
tanzu-jammy-stack |
CVE-2022-35252 (Low) |
|
java-native-image-cnb-buildpack |
CVE-2024-21144 (Low) |
|
tanzu-jammy-stack |
CVE-2023-28322 (Low) |
|
java-native-image-cnb-buildpack |
CVE-2024-21210 (Low) |
|
java-native-image-cnb-buildpack |
CVE-2024-21208 (Low) |
|
tanzu-jammy-stack |
CVE-2024-11053 (Low) |
|
tanzu-jammy-stack |
CVE-2025-0167 (Low) |
|
tanzu-jammy-stack |
CVE-2024-28085 (Low) |
|
java-native-image-cnb-buildpack |
GHSA-5mg8-w23w-74h3 (CVE-2020-8908) (Low) |
|
java-native-image-cnb-buildpack web-servers-cnb-buildpack |
GHSA-29wx-vh33-7x7r (CVE-2024-51744) (Low) |
|
java-native-image-cnb-buildpack |
GHSA-vfp6-jrw2-99g9 (CVE-2023-46737) (Low) |
|
uaa |
GHSA-4wp7-92pw-q264 (CVE-2025-22233) (Low) |
|
java-native-image-cnb-buildpack |
CVE-2022-30629 (Low) |
|
java-native-image-cnb-buildpack |
GHSA-6v67-2wr5-gvf4 (CVE-2024-12801) (Low) |
|
web-servers-cnb-buildpack |
GHSA-xr7q-jx4m-x55m (No known CVE) (Low) |
|
web-servers-cnb-buildpack |
GHSA-2x5j-vhc8-9cwm (No known CVE) (Low) |
|
java-native-image-cnb-buildpack |
GHSA-3633-5h82-39pq (No known CVE) (Low) |
|
java-native-image-cnb-buildpack |
GHSA-vp35-85q5-9f25 (No known CVE) (Low) |
|
java-native-image-cnb-buildpack |
GHSA-c9cp-9c75-9v8c (No known CVE) (Low) |
|
tanzu-jammy-stack |
CVE-2025-1795 (Low) |