Product Release Advisory - VMware Tanzu RabbitMQ on Kubernetes 4.2.5

RabbitMQ

7 more products

37253

20 March 2026

20 March 2026

CLOSED

HIGH

Product Release Advisory - VMware Tanzu RabbitMQ on Kubernetes 4.2.5

Advisory ID

TNZ-2026-0248

Tanzu Issue Date

2026-03-18

Updated on

  

 

 

Highest Score CVE from list below advisory details

Severity

High

CVSS V4 Vector

Unavailable

CVSS V4 Score

Unavailable (Sev: Unavailable)

CVSS V3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS V3.1 Score

8.4 (Sev: HIGH)

CVSS V2 Vector

Unavailable

CVSS V2 Score

Unavailable (Sev: Unavailable)
  • Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes: This release has the following security fixes, listed by component.

Component

Vulnerabilities Resolved

cert-manager-cainjector

CVE-2026-25679 (High)

CVE-2026-27142 (Medium)

CVE-2026-27139 (Low)

cert-manager-controller

CVE-2026-25679 (High)

CVE-2026-27142 (Medium)

CVE-2026-27139 (Low)

cert-manager-webhook

CVE-2026-25679 (High)

CVE-2026-27142 (Medium)

CVE-2026-27139 (Low)

rabbitmq-cluster-operator

CVE-2026-25679 (High)

CVE-2026-27142 (Medium)

CVE-2026-27139 (Low)

rabbitmq-default-user-updater

CVE-2026-25679 (High)

CVE-2026-27142 (Medium)

CVE-2026-27139 (Low)

rabbitmq-topology-operator

CVE-2026-25679 (High)

CVE-2026-27142 (Medium)

CVE-2026-27139 (Low)

tanzu-rabbitmq

CVE-2026-0861 (High)

CVE-2025-15281 (Medium)

CVE-2026-0915 (Medium)

CVE-2025-14831 (Medium)

CVE-2025-9820 (Medium)

trmq-audit-logger

CVE-2026-25679 (High)

CVE-2026-27142 (Medium)

CVE-2026-27139 (Low)