Jabber Server

The Jenkins project announced an unresolved security vulnerability affecting the current version of this plugin (why?):
List of issues
KeySummaryCreatedUpdated
#7Use HTTPS URLs in pom.xml
#6[SECURITY] Use HTTPS to resolve dependencies in Maven Build
JENKINS-60705Add support for SCRAM-SHA-1(-PLUS), SCRAM-SHA-256(-PLUS)
JENKINS-60704Can you change Jabber to XMPP?
#5Can you change Jabber to XMPP?
#3Plugin's start causes endless Loop