diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 785c631963..c690a85c7a 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -19,7 +19,8 @@ ddt<1.4.0
 # Stay on the latest LTS release of Django
 Django<2.3
 
-# Missing dependency declaration on ua-parser: https://github.com/jotes/django-cookies-samesite/issues/25
+# 0.6.0 has a missing dependency declaration on ua-parser: https://github.com/jotes/django-cookies-samesite/issues/25
+# 0.6.1 throws on some requests from iOS app: https://github.com/jotes/django-cookies-samesite/issues/28
 django-cookies-samesite<0.6.0
 
 # The CORS_ORIGIN_WHITELIST changes in a backwards incompatible way in 3.0.0, needs matching configuration repo changes