CVE-2025-64134

The Jenkins JDepend Plugin version 1.3.1 and earlier is vulnerable to XML External Entity (XXE) attacks because it includes an outdated version of the JDepend Maven Plugin with an improperly configured XML parser. An attacker capable of configuring input files for the Report JDepend step can prov...

CVE-2025-64134

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks...