Our security scanner is flagging version cryptography==43.0.3 This comes from the latest version of pysaml2 pysaml2==7.5.4 We can't just bump cryptography to 44.0.1 in the req's because pyopenSSL (also a dependency of pysaml2) doesn't allow. cryptography==43.0.3 # via # pyopenssl # pysaml2 pyopenssl==24.2.1 # via pysaml2 Can you release a patch bumping pyopenssl, and cryptography please.