Jenkins Owasp Dependency-check Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-16. Vendor: Jenkins Project.

CVEs of Jenkins Owasp Dependency-check Plugin

• CVE-2026-92136 - CVSS 8 (high), 2026-09-16: Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored…
• CVE-2024-28153 - CVSS 7.3 (high), 2024-03-06: Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site…
• CVE-2021-43577 - CVSS 7.1 (high), 2021-11-12: Jenkins OWASP Dependency-Check Plugin 5.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.