cve.nowby Sazabi

MavenPackage

org.apache.geronimo:geronimo

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release: 3.0.1 (May 23, 2013): no advisory affects it
Newest unaffected release: 3.0.1 (May 23, 2013), the latest release
Advisories: 1

Dependents: 0
Releases: 18 since 2.0.1 (Aug 15, 2007)
Registry: Maven Central
Releases read: Nov 8, 2026

Version timeline

CVE-2011-5034
Affects 1.2-beta to 2.2 (2.2.1 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

CVE-2011-5034Unrated
Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions…
Affected: fixed in 2.2.1.
Fixed in 2.2.1 (released Dec 3, 2010, 392 days before disclosure).
The latest release, 3.0.1, is not affected.