There is a cryptography 3.4.8 that updates the OpenSSL version used, please update the dependencies to allow it. Also, 36.0.1 is out that rewrites parts of the codebase in Rust, so it should be much safer, please look at allowing that version: https://cryptography.io/en/latest/changelog/