The Jenkins project plans to publish new Jenkins releases (weekly and LTS 2.492.3) on Wednesday, April 2. These updates will contain fixes for security issues present in current versions of Jenkins. The highest severity is "Medium". The security advisory will be issued at the same time to provide further information.
Additionally, we will announce security issues in plugins in this security advisory. The highest severity is "High" and these issues affect plugins installed on less than 1% of known instances. The advisory includes issues that will be published without a fix as outlined at
https://www.jenkins.io/security/plugins/