Out of date Python - how to update / why is it not being updated by Oracle

[YSJ Developers]

We are getting warnings that, even on the latest version (8.0.42 CE) that it is using out of date Python 3.12 - with multiple CVEs attached to it.

If I rename the python.exe and python312.dll files, and replace with a v3.13 python.exe (and the associated python313.dll file) - workbench won't load.

Presumably, it doesn't like the lack of the 312 DLL file.
If I fudge it (leave my v3.13 python exe, but rename 313 dll to 312.dll) - that doesn't work either.

While having 3.13 exe with the 3.12 dll is letting Workbench load, it's not a proper security fix.

I would really like to know why, when a new version of Python comes out, they are not patching Workbench (I get a new version needs to tested, but when there are CVEs involved then there should be say a 2 week turnaround on releasing an updated Workbench once it's been certified tested).

Python 3.13 came out late last year from memory (according to our test web server, I updated it there early December) - so why is a version of workbench, that is weeks old, still using 3.12??

I have updated our security team, that this is beyond my control - as it's the tool which our 3rd party support use to manage data in the system.