Support Content Notification - Support Portal

Product Release Advisory - VMware Tanzu RabbitMQ on Kubernetes 4.2.1

Product/Component

RabbitMQ

7 more products

Notification Id

36590

Last Updated

08 December 2025

Initial Publication Date

08 December 2025

Status

CLOSED

Severity

HIGH

CVSS Base Score

WorkAround

Affected CVE

	Highest Score CVE from list below advisory details
Severity	High
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS V3.1 Score	7.5 (Sev: HIGH)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
rabbitmq-cert-manager	CVE-2025-61725 (High) CVE-2025-61723 (High) CVE-2025-58188 (High) CVE-2025-58187 (High) CVE-2025-61724 (Medium) CVE-2025-58189 (Medium) CVE-2025-58186 (Medium) CVE-2025-58185 (Medium) CVE-2025-47912 (Medium) CVE-2025-58183 (Medium)
trmq-audit-logger	CVE-2025-61725 (High) CVE-2025-61723 (High) CVE-2025-58188 (High) CVE-2025-58187 (High) CVE-2025-61724 (Medium) CVE-2025-58189 (Medium) CVE-2025-58186 (Medium) CVE-2025-58185 (Medium) CVE-2025-47912 (Medium) CVE-2025-58183 (Medium)

History

2025-12-08: Initial vulnerability report published.

E-mail: [email protected]

VMware Tanzu Security Advisories
https://tanzu.vmware.com/security