Product Release Advisory - VMware Tanzu for Valkey 7.2.13, 8.0.9, 8.1.7, 9.0.4

Product/Component

VMware Tanzu Data Intelligence

4 more products

Notification Id

37556

Last Updated

29 May 2026

Initial Publication Date

29 May 2026

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

9.8

WorkAround

Affected CVE

Product Release Advisory

Advisory ID:	TNZ-2026-0279
Severity:	Critical
Issue Date:	05-29-2026
Updated on:
Synopsis	Few Critical & many High vulnerabilities were found and fixed in these VMware Tanzu for Valkey releases.

Product Version Release Advisory

VMware Tanzu for Valkey - 9.0

https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-valkey/9-0/tanzu-valkey-docs/release-notes.html

VMware Tanzu for Valkey - 8.1

https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-valkey/8-1/tanzu-valkey-docs/release-notes.html

VMware Tanzu for Valkey - 8.0

https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-valkey/8-0/tanzu-valkey-docs/release-notes.html

VMware Tanzu for Valkey - 7.2

https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-valkey/7-2/tanzu-valkey-docs/release-notes.html

Security Fixes

This release has the following security fixes, listed by component and area.

Component	Vulnerabilities Resolved
Tanzu for Valkey 7.2.13	Critical CVE-2026-41179 / GHSA-jfwf-28xr-xw6q CVE-2026-41176 / GHSA-25qr-6mpr-f7qx CVE-2026-27143 CVE-2026-33186 / GHSA-p77j-4mvh-x3m3 High CVE-2026-27140 CVE-2026-25679 CVE-2026-32283 CVE-2026-29181 / GHSA-mh2q-q3fh-2475 CVE-2026-32280 CVE-2026-32281 GHSA-6g7g-w4f8-9c9x CVE-2026-27144 Medium CVE-2026-32282 CVE-2026-32289 CVE-2026-27142 GHSA-xmrv-pmrh-hhx2 CVE-2026-32288 CVE-2026-33809 / GHSA-44p7-9xx4-hf2g Low CVE-2026-1229 / GHSA-q9hv-hpm4-hj6x CVE-2026-27139
Tanzu for Valkey 8.0.9	Critical CVE-2026-27143 CVE-2026-41179 / GHSA-jfwf-28xr-xw6q CVE-2026-41176 / GHSA-25qr-6mpr-f7qx CVE-2026-33186 / GHSA-p77j-4mvh-x3m3 High CVE-2026-27140 CVE-2026-32280 CVE-2026-32283 GHSA-6g7g-w4f8-9c9x CVE-2026-32281 CVE-2026-29181 / GHSA-mh2q-q3fh-2475 CVE-2026-25679 CVE-2026-27144 Medium CVE-2026-32282 CVE-2026-27142 CVE-2026-32289 GHSA-xmrv-pmrh-hhx2 CVE-2026-32288 CVE-2026-33809 / GHSA-44p7-9xx4-hf2g Low CVE-2026-1229 / GHSA-q9hv-hpm4-hj6x CVE-2026-27139
Tanzu for Valkey 8.1.7	Critical CVE-2026-41179 / GHSA-jfwf-28xr-xw6q CVE-2026-27143 CVE-2026-41176 / GHSA-25qr-6mpr-f7qx CVE-2026-33186 / GHSA-p77j-4mvh-x3m3 High CVE-2026-27140 CVE-2026-25679 CVE-2026-29181 / GHSA-mh2q-q3fh-2475 CVE-2026-32281 CVE-2026-32280 CVE-2026-32283 GHSA-6g7g-w4f8-9c9x CVE-2026-27144 Medium CVE-2026-32282 CVE-2026-27142 CVE-2026-32289 GHSA-xmrv-pmrh-hhx2 CVE-2026-32288 CVE-2026-33809 / GHSA-44p7-9xx4-hf2g Low CVE-2026-1229 / GHSA-q9hv-hpm4-hj6x CVE-2026-27139
Tanzu for Valkey 9.0.4	Critical CVE-2026-41179 / GHSA-jfwf-28xr-xw6q CVE-2026-41176 / GHSA-25qr-6mpr-f7qx CVE-2026-27143 CVE-2026-33186 / GHSA-p77j-4mvh-x3m3 High CVE-2026-27140 CVE-2026-25679 CVE-2026-29181 / GHSA-mh2q-q3fh-2475 CVE-2026-32283 CVE-2026-32280 CVE-2026-32281 GHSA-6g7g-w4f8-9c9x CVE-2026-27144 Medium CVE-2026-32282 CVE-2026-27142 CVE-2026-32289 GHSA-xmrv-pmrh-hhx2 CVE-2026-32288 CVE-2026-33809 / GHSA-44p7-9xx4-hf2g Low CVE-2026-1229 / GHSA-q9hv-hpm4-hj6x CVE-2026-27139

History

2026-05-29: Initial vulnerability report published.

Contact

E-mail: [email protected]

VMware Tanzu Security Advisories: https://tanzu.vmware.com/security