Product Release Advisory

Advisory ID:	TNZ-2025-0049
Severity:	Critical
Issue Date:	2025-08-13
Updated on:	2025-08-13
Synopsis	Many critical & high vulnerabilities were found in Valkey for Kubernetes 2.1.0, which is addressed in Valkey for Kubernetes 3.0.0

Product Version Release Advisory

VMware Tanzu for Valkey

https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-for-valkey-on-kubernetes/3-0/valkey-on-kubernetes/release-notes.html

Security Fixes

This release has the following security fixes, listed by component and area.

Component

Vulnerabilities Resolved

Valkey 2.1.0, fixed in Valkey 3.0.0

CVE-2025-49794 (critical)
CVE-2025-49796 (critical)
CVE-2024-22667 (high)
CVE-2024-56171 (high)
CVE-2023-0054 (high)
CVE-2022-3234 (high)
CVE-2023-4781 (high)
CVE-2022-2304 (high)
CVE-2022-2343 (high)
CVE-2022-3296 (high)
CVE-2022-2210 (high)
CVE-2022-3352 (high)
CVE-2022-3256 (high)
CVE-2021-4173 (high)
CVE-2022-2522 (high)
CVE-2022-2982 (high)
CVE-2022-2257 (high)
CVE-2022-3099 (high)
CVE-2022-4141 (high)
CVE-2022-2819 (high)
CVE-2022-2286 (high)
CVE-2022-2862 (high)
CVE-2021-45078 (high)
CVE-2025-6020 (high)
CVE-2022-2344 (high)
CVE-2022-2345 (high)
CVE-2022-3297 (high)
CVE-2025-24928 (high)
CVE-2022-1620 (high)
CVE-2022-3235 (high)
CVE-2022-2206 (high)
CVE-2022-3324 (high)
CVE-2022-2175 (high)
CVE-2023-0433 (high)
CVE-2022-2817 (high)
CVE-2022-1619 (high)
CVE-2022-2125 (high)
CVE-2022-1616 (high)
CVE-2022-2889 (high)
CVE-2023-4734 (high)
CVE-2022-2284 (high)
CVE-2022-2042 (high)
CVE-2023-0512 (high)
CVE-2022-2126 (high)
CVE-2022-2207 (high)
CVE-2022-2946 (high)
CVE-2022-2124 (high)
CVE-2023-4751 (high)
CVE-2022-3134 (high)
CVE-2022-3016 (high)
CVE-2022-2285 (high)
CVE-2021-3973 (high)
CVE-2022-2182 (high)
CVE-2022-2129 (high)
CVE-2023-4738 (high)
CVE-2022-44840 (high)
CVE-2022-3037 (high)
CVE-2022-4292 (high)
CVE-2023-0051 (high)
CVE-2025-4517 (high)
CVE-2024-12718 (high)
CVE-2025-4138 (high)
CVE-2021-3826 (high)
CVE-2025-8194 (high)
CVE-2025-4435 (high)
CVE-2025-22874 (high)
CVE-2025-6021 (high)
CVE-2024-8176 (high)
CVE-2024-12797 (high)
CVE-2024-10963 (high)
CVE-2021-3927 (high)
CVE-2023-4735 (high)
CVE-2021-3928 (high)
CVE-2023-0288 (high)
CVE-2021-4187 (high)
CVE-2023-0049 (high)
CVE-2023-1127 (high)
CVE-2025-4330 (high)
CVE-2022-2287 (high)
CVE-2025-47273 (high)
CVE-2021-4166 (high)
CVE-2023-4752 (high)
CVE-2022-3705 (high)
CVE-2023-1579 (high)
CVE-2024-52533 (high)
CVE-2025-4802 (high)
CVE-2021-4136 (medium)
CVE-2025-4673 (medium)
CVE-2025-0938 (medium)
CVE-2022-0213 (medium)
CVE-2022-0351 (medium)
CVE-2025-47268 (medium)
CVE-2025-24528 (medium)
CVE-2024-9287 (medium)
CVE-2022-3153 (medium)
CVE-2022-1720 (medium)
CVE-2020-11023 (medium)
CVE-2022-49043 (medium)
CVE-2025-3576 (medium)
CVE-2025-5702 (medium)
CVE-2023-2609 (medium)
CVE-2022-4293 (medium)
CVE-2025-48060 (medium)
CVE-2022-2923 (medium)
CVE-2022-2874 (medium)
CVE-2025-0395 (medium)
CVE-2022-2980 (medium)
CVE-2023-1264 (medium)
CVE-2022-47008 (medium)
CVE-2022-3278 (medium)
CVE-2022-47007 (medium)
CVE-2022-1674 (medium)
CVE-2023-5441 (medium)
CVE-2022-47011 (medium)
CVE-2022-38533 (medium)
CVE-2023-2610 (medium)
CVE-2022-1725 (medium)
CVE-2022-47010 (medium)
CVE-2025-50181 (medium)
CVE-2025-7546 (medium)
CVE-2023-1175 (medium)
CVE-2025-48964 (medium)
CVE-2025-7545 (medium)
CVE-2023-5344 (medium)
CVE-2024-12133 (medium)
CVE-2023-1170 (medium)
CVE-2025-50182 (medium)
CVE-2024-12243 (medium)
CVE-2025-4516 (medium)
CVE-2024-57360 (medium)
CVE-2024-0397 (medium)
CVE-2024-7592 (medium)
CVE-2025-4373 (medium)
CVE-2024-10041 (medium)
CVE-2023-48706 (medium)
CVE-2024-43802 (medium)
CVE-2024-41957 (medium)
CVE-2021-3572 (medium)
CVE-2024-45306 (medium)
CVE-2025-29768 (medium)
CVE-2024-29040 (medium)
CVE-2019-12900 (medium)
CVE-2023-48232 (medium)
CVE-2023-48235 (medium)
CVE-2025-6069 (medium)
CVE-2023-48236 (medium)
CVE-2024-23337 (medium)
CVE-2023-48231 (medium)
CVE-2023-48233 (medium)
CVE-2023-48234 (medium)
CVE-2023-48237 (medium)
CVE-2025-24014 (medium)
CVE-2025-22134 (medium)
CVE-2025-26603 (medium)
CVE-2021-20197 (medium)
CVE-2024-41965 (medium)
CVE-2025-53906 (medium)
CVE-2025-53905 (medium)
CVE-2025-25724 (medium)
CVE-2023-46246 (medium)
CVE-2025-5245 (medium)
CVE-2024-25260 (medium)
CVE-2024-47814 (low)
CVE-2024-11168 (low)
CVE-2024-43374 (low)
CVE-2022-2183 (low)
CVE-2025-3198 (low)
CVE-2023-5535 (low)
CVE-2025-1377 (low)
CVE-2025-1371 (low)
CVE-2022-2208 (low)
CVE-2025-1150 (low)
CVE-2025-1151 (low)
CVE-2025-1153 (low)
CVE-2025-1152 (low)
CVE-2025-1795 (low)
CVE-2021-3968 (low)
CVE-2021-3974 (low)
CVE-2025-1215 (low)
CVE-2022-2849 (low)
CVE-2022-2845 (low)
CVE-2025-1376 (low)
CVE-2023-1972 (low)
CVE-2021-32256 (none)
CVE-2023-2222 (none)

History

2025-07-13: Initial vulnerability report published.

Contact

E-mail: [email protected]

VMware Tanzu Security Advisories: https://tanzu.vmware.com/security