Apache2 uses Python CGI script, it is Security hole?
Hooray for worrying about security!

Yes. There are always security holes.
Use HTTPS rather than HTTP... Everywhere... (get free certificate from letsencrypt.com)
Submitting data should generally use POST, not GET. (POST and HTTPS means the data is encrypted during transport. GET requests data via the URL which itself isn't encrypted.
Mobile vs. Desktop isn't an issue
Json vs. whatever isn't an issue
Django vs. Python CGI isn't really an issue: if not properly configured either can have security issues.
1.Hi I have Python CGI  script on Apache2 Server. 
2.I want send data from apache2. Format is Json
3.Send data to mobile aplication.
4.Mobile aplication request data usefull HTTP Request Methods: GET. 
5.The application uses HTTPURLCONECTION.
But People ask, This is security hole. Is it realy security hole ??
Solution could be Django on Apache 2 ?
or Solution could be SSL?