Curseforge Publisher

The Jenkins project announced an unresolved security vulnerability affecting the current version of this plugin (why?):

What does it do?

This plugin allows users to upload build artifacts to CurseForge as mod releases.