Product Release Advisory - Tanzu Hub 10.3.2
Notification Id
36715
Last Updated
28 December 2025
Initial Publication Date
28 December 2025
CLOSED
CRITICAL
9.8
N/A
See CVE list in advisory
Product Release Advisory - Tanzu Hub 10.3.2
|
Advisory ID |
TNZ-2025-0393 |
|
Tanzu Issue Date |
2025-12-16 |
|
Updated on |
|
Highest Score CVE from list below advisory details |
|
|
Severity |
Critical |
|
CVSS V4 Vector |
Unavailable |
|
CVSS V4 Score |
Unavailable (Sev: Unavailable) |
|
CVSS V3.1 Vector |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N |
|
CVSS V3.1 Score |
8.6 (Sev: HIGH) |
|
CVSS V2 Vector |
Unavailable |
|
CVSS V2 Score |
Unavailable (Sev: Unavailable) |
- Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.
Product Version Release Advisory
- Product Release Tanzu Hub 10.3.2
- Product Release Notes: https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/tanzu-hub/10-2/tnz-hub/release-notes.html
Security Fixes: This release has the following security fixes, listed by component.
|
Component |
Vulnerabilities Resolved |
|
bpm |
|
|
ensemble |
|
|
entity_data_service |
|
|
frp |
|
|
kafka |
|
|
lemans |
|
|
monitoring |
|
|
postgresql |
|
|
statsd |
|
|
tanzu-sm-installer |
|
|
temporal |
|
|
tp-clickhouse |
|
|
tp-contour |
|
|
tp-daedalus |
|
|
tp-registry-data-infra-services |
|
|
uaa |
|
|
versitygw |
|
|
vmware_helm |
|