It was discovered that Python incorrectly stripped certain characters from requests. A remote attacker could use this issue to perform CRLF injection. (CVE-2019-18348)
It was discovered that Python incorrectly handled certain HTTP requests. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-8492)
2.7.12-1ubuntu0~16.04.113.5.2-2ubuntu0~16.04.102.7.17-1~18.04ubuntu13.6.9-1~18.04ubuntu12.7.6-8ubuntu0.6+esm53.4.3-1ubuntu1~14.04.7+esm6