Support Content Notification - Support Portal

Product Release Advisory - Service Publisher for VMware Tanzu Platform 10.3.5

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

37052

Last Updated

25 February 2026

Initial Publication Date

25 February 2026

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - Service Publisher for VMware Tanzu Platform 10.3.5

	Highest Score CVE from list below advisory details
Severity	Critical
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS V3.1 Score	10.0 (Sev: CRITICAL)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes: This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
service-publisher	CVE-2025-68121 (Critical) CVE-2025-61732 (High) CVE-2025-61731 (High) CVE-2024-24792 - GHSA-9phm-fm57-rhg8 (High) CVE-2025-66564 - GHSA-4qg8-fj49-pxjh (High) CVE-2025-61726 (High) CVE-2025-68119 (High) CVE-2025-27144 - GHSA-c6gw-w398-hv78 (Medium) CVE-2023-29408 - GHSA-x92r-3vfx-4cv3 (Medium) CVE-2023-29407 - GHSA-j3p8-6mrq-6g7h (Medium) CVE-2025-61728 (Medium) CVE-2026-22703 - GHSA-whqx-f9j3-ch6m (Medium) CVE-2022-41727 - GHSA-qgc7-mgm3-q253 (Medium) CVE-2025-61730 (Medium) CVE-2025-8556 - GHSA-2x5j-vhc8-9cwm (Low)

Component

Vulnerabilities Resolved

service-publisher