CVE-2025-64134
Published Oct 29, 2025Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.
Vendor/product archive
1 CVEs tagged to jenkins / jdepend — 0 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.