Jenkins Jdepend vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Jdepend: 1 record(s), with affected versions and fixes.
cpe:2.3:a:jenkins:jdepend

CVE-2025-64134 High · 7.1 CWE-611 Oct 29, 2025

XML External Entity (XXE) in Jenkins Jdepend

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.