In September, 2016, a security vulnerability was reported in OpenSSL, which affects the version of Python bundled with ArcGIS Pro.
Python fixed the problem on November 1, 2016. It has been 3 months since November 1, 2016.
When will ArcGIS Pro be patched?