Support Content Notification - Support Portal

Product Release Advisory - Cloud Native Buildpacks for VMware Tanzu Platform 0.6.1

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

36625

Last Updated

18 December 2025

Initial Publication Date

18 December 2025

Status

CLOSED

Severity

HIGH

CVSS Base Score

8.6

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - Cloud Native Buildpacks for VMware Tanzu Platform 0.6.1

	Highest Score CVE from list below advisory details
Severity	High
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS V3.1 Score	8.6 (Sev: HIGH)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes: This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
cloud-native-buildpacks	CVE-2025-4674 (High) CVE-2025-61729 (High) CVE-2025-61725 (High) CVE-2025-61723 (High) CVE-2025-58188 (High) CVE-2025-58187 (High) CVE-2025-22874 (High) CVE-2025-47907 (High) CVE-2025-4673 (Medium) CVE-2025-61727 (Medium) CVE-2025-47906 (Medium) CVE-2025-0913 (Medium) CVE-2025-58181 - GHSA-j5w8-q4qc-rx2x (Medium) CVE-2025-47914 - GHSA-f6x5-jh6r-wrfv (Medium) CVE-2025-61724 (Medium) CVE-2025-58189 (Medium) CVE-2025-58186 (Medium) CVE-2025-58185 (Medium) CVE-2025-47912 (Medium) CVE-2025-58183 (Medium)

Component

Vulnerabilities Resolved

cloud-native-buildpacks