diff --git a/test-requirements.txt b/test-requirements.txt
index a3902f8c2ff..339fa330361 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -19,5 +19,5 @@ testresources>=2.0.0 # Apache-2.0/BSD
 testscenarios>=0.4 # Apache-2.0/BSD
 oslo.versionedobjects[fixtures]>=1.31.2 # Apache-2.0
 tempest>=17.1.0 # Apache-2.0
-bandit>=1.1.0 # Apache-2.0
+bandit>=1.1.0,<1.6.3 # Apache-2.0
 reno>=2.5.0 # Apache-2.0