VYPR

Jdepend

by Jenkins Project

CVEs (1)

  • CVE-2025-64134HigOct 29, 2025
    risk 0.46cvss 7.1epss 0.00

    Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.