jdepend vulnerabilities

CVEs whose affected-version data names the jdepend package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-64134High· 7.1

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.

▾ Twilightjenkins · jdependEPSS 0.35%via NVD

jdepend vulnerabilities (CVEs) · VulnSea