diff --git a/setup.cfg b/setup.cfg
index c3da58b24b..43117a3212 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -31,7 +31,7 @@ memcache =
 mongodb =
   pymongo!=3.1,>=3.0.2 # Apache-2.0
 bandit =
-  bandit!=1.6.0,>=1.1.0 # Apache-2.0
+  bandit<1.5.0,>=1.1.0 # Apache-2.0
 
 [global]
 setup-hooks =