https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T04:43:31.679101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260079 EUVD-2026-260079 2026-10-10T04:43:31.682291+00:00 EUVD-2026-260079 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64134 fkie_cve-2025-64134 2026-10-10T04:43:31.682322+00:00

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-jfg6-4gx3-3v7w GHSA-jfg6-4gx3-3v7w — Jenkins JDepend Plugin vulnerable to XML external entity attacks 2026-10-10T04:43:31.682352+00:00

Affected: Maven: org.jenkins-ci.plugins:jdepend

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.

This allows attackers able to configure input files for the "Report JDepend" step to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2443 WID-SEC-W-2025-2443 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-10T04:43:31.682379+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und serverseitige Request-Forgery durchzuführen