Jenkins plugins security advisory

[Daniel Beck]

The following Jenkins plugin updates contain fixes for security vulnerabilities:

* MCP Server Plugin 0.86.v7d3355e6a_a_18
* SAML Plugin 4.583.585.v22ccc1139f55

Additionally, we announce unresolved security issues in the following plugins:

* Azure CLI Plugin
* ByteGuard Build Actions Plugin
* Curseforge Publisher Plugin
* Eggplant Runner Plugin
* Extensible Choice Parameter Plugin
* JDepend Plugin
* Nexus Task Runner Plugin
* OpenShift Pipeline Plugin
* Publish to Bitbucket Plugin
* Start Windocks Containers Plugin
* Themis Plugin

Please see the advisory for more information:
https://www.jenkins.io/security/advisory/2025-10-29/