{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/stemcells-for-windows-2019.x--2019.104.x/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["API Gateway for VMware Tanzu Platform (\u003c 2.4.10)","Platform Services for VMware Tanzu Platform (10.x \u003c 10.4.6)","Platform Services for VMware Tanzu Platform (\u003c 11.0.0)","Ruby Buildpack (\u003c 1.10.95)","Service Publisher for VMware Tanzu Platform (\u003c 10.4.6)","Staticfile Buildpack (\u003c 1.6.103)","Stemcells for Ubuntu Jammy Azure Light (\u003c 1.9041.x)","Stemcells for Ubuntu Jammy FIPS (\u003c 1.9041.x)","Stemcells for Ubuntu Resolute (\u003c 1.0.x)","Stemcells for Windows (2019.x \u003c 2019.104.x)","Stemcells for Windows (2022.x \u003c 2022.8.x)","Tanzu GemFire on Tanzu Platform (\u003c 11.0.0)","Tanzu Hub (\u003c 10.4.6)","Tanzu Hub (\u003c 11.0.0)","Tanzu Kubernetes Grid Integrated Edition - Mgmt Console (\u003c 1.26.3)","Tanzu for Postgres on Tanzu Platform (\u003c 11.0.0)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","cloud","infrastructure"],"_cs_type":"advisory","_cs_vendors":["VMware"],"content_html":"\u003cp\u003eThe French CERT (ANSSI) has published an advisory regarding numerous security vulnerabilities identified across multiple VMware Tanzu Platform products and related components, including buildpacks and stemcells. The vulnerabilities affect a wide range of versions, and the vendor has provided specific security advisories for each component. As of the time of reporting, the specific security impact remains undisclosed by the vendor. Organizations are directed to the official Broadcom security advisory portal to identify the specific risk levels and remediation paths for their environments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all deployed VMware Tanzu Platform components, including buildpacks and stemcells, to determine if they fall within the affected version ranges identified by the Broadcom advisories.\u003c/li\u003e\n\u003cli\u003eApply the vendor-provided security patches referenced in the official Broadcom documentation for each affected component immediately.\u003c/li\u003e\n\u003cli\u003eMonitor the Broadcom Support portal for any additional updates or clarifications regarding the nature of these vulnerabilities as more technical details become available.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-26T22:20:43Z","date_published":"2026-10-26T22:20:43Z","id":"https://feed.craftedsignal.io/briefs/2026-10-vmware-tanzu-vulnerabilities/","summary":"Multiple vulnerabilities discovered in various VMware Tanzu Platform components, including API Gateway, Tanzu Hub, and associated buildpacks, require urgent review of Broadcom security advisories for remediation.","title":"VMware Tanzu Platform and Associated Components: Multiple Vulnerabilities","url":"https://feed.craftedsignal.io/briefs/2026-10-vmware-tanzu-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Stemcells for Windows (2019.x \u003c 2019.104.x)","version":"https://jsonfeed.org/version/1.1"}