diff --git a/test-requirements.txt b/test-requirements.txt
index 116c70f..dfaa3fe 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -4,12 +4,12 @@
 hacking>=3.0.1,<3.1.0;python_version!='2.7' # Apache-2.0
 hacking!=0.13.0,<0.14,>=0.12.0;python_version=='2.7' # Apache-2.0
 
-bandit!=1.6.0,>=1.1.0 # Apache-2.0
+bandit!=1.6.0,>=1.4.0,<1.6.3 # Apache-2.0
 coverage!=4.4,>=4.0 # Apache-2.0
 flake8-import-order==0.12 # LGPLv3
 httpretty>=0.8.0,!=0.8.1,!=0.8.2,!=0.8.3
 mock>=2.0.0 # BSD
-oslotest>=3.2.0,<=3.9.0 # Apache-2.0
+oslotest>=3.2.0
 python-openstackclient>=3.12.0 # Apache-2.0
 sphinx!=1.6.6,>=1.6.2 # BSD
 oslosphinx>=4.7.0 # Apache-2.0