The python plugin documentation points to an incorrect repository in its documentation page, which makes it difficult or impossible to evaluate whether there are any security issues with its implementation.  At https://plugins.jenkins.io/python/ its github link is to 
https://github.com/jenkinsci/scp-plugin , an unrelated project. 

It seems like this just needs to be `https://github.com/jenkinsci/python-plugin`