Support Content Notification - Support Portal

Product Release Advisory - Extended App Support for Tanzu Platform 1.0.7

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

36321

Last Updated

05 November 2025

Initial Publication Date

05 November 2025

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

9.4

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - Extended App Support for Tanzu Platform 1.0.7

	Highest Score CVE from list below advisory details
Severity	Critical
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS V3.1 Score	9.4 (Sev: CRITICAL)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" is is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
extended-app-support-buildpacks	CVE-2025-4517 (Critical) CVE-2024-8088 (High) CVE-2025-50059 (High) CVE-2024-9287 (High) CVE-2025-48989 - GHSA-gqp3-2cvr-x8m3 (High) CVE-2025-52434 - GHSA-4j3c-42xv-3f84 (High) CVE-2025-53506 - GHSA-25xr-qj8w-c4vf (High) CVE-2025-4435 (High) CVE-2025-4330 (High) CVE-2025-4138 (High) CVE-2024-7592 (High) CVE-2024-6232 (High) CVE-2024-12254 (High) CVE-2025-25186 - GHSA-7fc5-f82f-cx69 (Medium) CVE-2024-5642 (Medium) CVE-2025-0938 (Medium) CVE-2025-46551 - GHSA-72qj-48g4-5xgx (Medium) CVE-2025-8916 - GHSA-4cx2-fc23-5wg6 (Medium) CVE-2025-4516 (Medium) CVE-2024-50602 (Medium) CVE-2024-6923 (Medium) CVE-2025-47910 (Medium) CVE-2024-12718 (Medium) CVE-2023-27043 (Medium) CVE-2024-3219 (Medium) CVE-2024-58266 - GHSA-r7qv-8r2h-pg27 (Low)

Component

Vulnerabilities Resolved

extended-app-support-buildpacks