Consul KV Builder

The Jenkins project announced an unresolved security vulnerability affecting the current version of this plugin (why?):
List of issues
KeySummaryCreatedUpdated
#20Bump jackson-databind from 2.0.0 to 2.12.6.1
#18Bump httpclient from 4.5.1 to 4.5.13
#17Bump commons-io from 2.4 to 2.7
#13[SECURITY] Use HTTPS to resolve dependencies in Maven Build
#11Use HTTPS URLs in pom.xml
#10aclToken is not taken from Pipeline call
#9How to WRITE to consul in Pipeline?
#8NPE Using Jenkins Pipeline on a build agent
#6helptext/defaults
#4Global settings not saved until after first job run