Jenkins Visual Studio Code Metrics — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Visual Studio Code Metrics, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2023-28681 — CVSS 8.2 (high): Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.