Advisories for Maven/Org.jenkins-Ci.plugins/Valgrind package

The Jenkins Valgrind Plugin does not configure its XML parser to prevent XML external entity (XXE) attacks.

The Jenkins Valgrind Plugin does not escape content in Valgrind XML reports, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Valgrind XML report contents.