CVE-2025-64134

The Jenkins JDepend Plugin (version 1.3.1 and earlier) is vulnerable to XML External Entity (XXE) attacks because it includes an outdated version of the JDepend Maven Plugin . The underlying cause is a failure to configure the XML parser to disable external entity processing. An attacker could pr...