Support Content Notification - Support Portal

Product Release Advisory - Metric Store 1.8.2

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

37033

Last Updated

24 February 2026

Initial Publication Date

24 February 2026

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - Metric Store 1.8.2

	Highest Score CVE from list below advisory details
Severity	Critical
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS V3.1 Score	10.0 (Sev: CRITICAL)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes: This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
p-metric-store	CVE-2025-68121 (Critical) CVE-2025-61732 (High) CVE-2025-61731 (High) CVE-2025-22868 - GHSA-6v2p-p543-phr9 (High) CVE-2025-61729 (High) CVE-2025-61726 (High) CVE-2025-61725 (High) CVE-2025-61723 (High) CVE-2025-58188 (High) CVE-2025-58187 (High) CVE-2025-52565 - GHSA-qw9x-cqr3-wc7r (High) CVE-2025-52881 - GHSA-cgrx-mc8f-2prm (High) CVE-2025-31133 - GHSA-9493-h29p-rfm2 (High) CVE-2025-68119 (High) CVE-2024-24557 - GHSA-xw73-rw38-6vjc (Medium) CVE-2025-61728 (Medium) CVE-2025-61727 (Medium) CVE-2024-6104 - GHSA-v6v8-xj6m-xwqh (Medium) CVE-2024-35255 - GHSA-m5vv-6r4h-3vj9 (Medium) CVE-2025-47910 (Medium) CVE-2025-61730 (Medium) CVE-2025-61724 (Medium) CVE-2025-58189 (Medium) CVE-2025-58186 (Medium) CVE-2025-58185 (Medium) CVE-2025-47912 (Medium) CVE-2025-58183 (Medium) CVE-2024-51744 - GHSA-29wx-vh33-7x7r (Low)

Component

Vulnerabilities Resolved

p-metric-store