diff --git a/setup.cfg b/setup.cfg
index c876babe9c..f70a0d4f98 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -35,7 +35,7 @@ memcache =
 mongodb =
   pymongo!=3.1,>=3.0.2 # Apache-2.0
 bandit =
-  bandit>=1.1.0 # Apache-2.0
+  bandit!=1.6.0,>=1.1.0 # Apache-2.0
 
 [global]
 setup-hooks =