CVE-2025-64134

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2025-64134

The Jenkins JDepend Plugin (version 1.3.1 and earlier) is vulnerable to XML External Entity (XXE) attacks because it includes an outdated version of the JDepend Maven Plugin . The underlying cause is a failure to configure the XML parser to disable external entity processing. An attacker could pr...