Security Advisory
CVE-2025-64134
7.1
HIGH
Vulnerability Description
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.
Published Date
October 29, 2025
Official Source
NIST NVD Advisory