How to build AWSCLI v2 to use a newer version of Python

[jreitzersmith]

Greetings All,

I am hoping that someone will be able to assist or point me in the correct direction.

I have an instance that is under strict security protocols to stay updated with the latest security updates. Our security software flagged one of the files under the AWS CLI installation directory as vulnerable. (CVE-2022-45061, CVE-2021-28861, CVE-2022-42919)

The file in question is python39.dll. Once AWS CLI is installed, it reports that the python version in use is 3.9.11.
aws --version >>> aws-cli/2.9.6 Python/3.9.11 Windows/10 exe/AMD64 prompt/off

The 3.9.11 version is reported regardless of which version of Python is installed as a standalone install. In this case, I have Python 3.10.9 installed.

The CVEs mentioned above were fixed by the Python maintainers as of 3.9.16, 3.10.9, and 3.11.1. The ReadMe for CLIv2 indicates that support for 3.10.x has been added as of ~9/2022.

Where I need help is in replacing the python39.dll with 3.10 or even 3.9.16. How can I force AWS CLI to use a different version of Python and replace the python39.dll file altogether?