CVE-2021-43577: Jenkins Owasp Dependency-Check

High severity, CVSS 7.1. EPSS: 1% chance of exploitation in the next 30 days.

Jenkins OWASP Dependency-Check Plugin 5.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

• Jenkins Owasp Dependency-Check: up to and including 5.1.1

Published 2021-11-12. Last modified 2026-06-17.