Jython (2.7.4) is using setuptools-41.0.1 which has dependency on certifi-2016.9.26
this version of certifi is vulnerable to CVE-2023-37920.
Considering in newer versions of setuptools, they no longer have dependency on this version of certifi, is there a plan to upgrade setuptools in Jython to remove this vulnerability in Jython?