diff --git a/requirements-app.txt b/requirements-app.txt
index 74354dd8c..f81170851 100644
--- a/requirements-app.txt
+++ b/requirements-app.txt
@@ -27,7 +27,7 @@ beautifulsoup4==4.9.3
 lxml==4.6.3
 # higher version causes build to fail on PaaS due to lack of Rust
 # see https://github.com/pyca/cryptography/issues/5810
-cryptography<3.4
+cryptography==3.4.7
 
 notifications-python-client==6.0.2