Custom Job Icon

The Jenkins project announced an unresolved security vulnerability affecting the current version of this plugin (why?):
This plugin is up for adoption! We are looking for new maintainers. Visit our Adopt a Plugin initiative for more information.
List of issues
KeySummaryCreatedUpdated
JENKINS-74308[custom-job-icon] Extract inline event handler in WEB-INF/classes/jenkins/plugins/jobicon/CustomIconProperty/global-icons-table.jelly
JENKINS-74307[custom-job-icon] Extract inline script blocks in WEB-INF/classes/jenkins/plugins/jobicon/CustomIconProperty/global.jelly
JENKINS-36279blank custom icon in pipeline job
JENKINS-25571HTTP 404 when deleting existing icon