Package · Maven

org.jenkins-ci.plugins:jdepend

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.1

CVE-2025-64134

Jenkins JDepend Plugin vulnerable to XML external entity attacks

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins JDepend Plugin org.jenkins-ci.plugins:jdepend Web / CMS Maven

Oct 29, 2025