2.7.16

DATE	CVE	VULNERABILITY TITLE	RISK
2017-12-14	CVE-2017-17522	Injection vulnerability in Python Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. network low complexity python CWE-74	8.8
2015-10-06	CVE-2015-5652	Remote Code Execution vulnerability in Python DLL Loading 'readline.pyd' Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current working directory. local low complexity python microsoft	7.2