diff --git a/setup.cfg b/setup.cfg
index b0449df189..a6e742db26 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -32,7 +32,7 @@ memcache =
 mongodb =
   pymongo!=3.1,>=3.0.2 # Apache-2.0
 bandit =
-  bandit>=1.1.0 # Apache-2.0
+  bandit!=1.6.0,>=1.1.0 # Apache-2.0
 
 [global]
 setup-hooks =