diff --git a/requirements/edx-sandbox/base.txt b/requirements/edx-sandbox/base.txt
index ba32dd87ef..334b8d5443 100644
--- a/requirements/edx-sandbox/base.txt
+++ b/requirements/edx-sandbox/base.txt
@@ -9,7 +9,7 @@ common/lib/chem
 common/lib/sandbox-packages
 common/lib/symmath
 asn1crypto==0.24.0
-cffi==1.12.2
+cffi==1.12.3
 cryptography==2.6.1
 enum34==1.1.6
 ipaddress==1.0.22
diff --git a/requirements/edx-sandbox/shared.txt b/requirements/edx-sandbox/shared.txt
index 29c82c108c..f65abee471 100644
--- a/requirements/edx-sandbox/shared.txt
+++ b/requirements/edx-sandbox/shared.txt
@@ -5,7 +5,7 @@
 #    make upgrade
 #
 asn1crypto==0.24.0        # via cryptography
-cffi==1.12.2              # via cryptography
+cffi==1.12.3              # via cryptography
 cryptography==2.6.1
 enum34==1.1.6             # via cryptography
 ipaddress==1.0.22         # via cryptography
diff --git a/requirements/edx/base.txt b/requirements/edx/base.txt
index f3eb584850..4c4c4350d8 100644
--- a/requirements/edx/base.txt
+++ b/requirements/edx/base.txt
@@ -54,7 +54,7 @@ boto==2.39.0
 botocore==1.8.17
 celery==3.1.25
 certifi==2019.3.9
-cffi==1.12.2
+cffi==1.12.3
 chardet==3.0.4
 click==7.0                # via user-util
 coreapi==2.3.3            # via django-rest-swagger, openapi-codec
diff --git a/requirements/edx/development.txt b/requirements/edx/development.txt
index 9170ed0e1b..7ae8167898 100644
--- a/requirements/edx/development.txt
+++ b/requirements/edx/development.txt
@@ -64,7 +64,7 @@ botocore==1.8.17
 caniusepython3==7.0.0
 celery==3.1.25
 certifi==2019.3.9
-cffi==1.12.2
+cffi==1.12.3
 chardet==3.0.4
 click-log==0.3.2
 click==7.0
diff --git a/requirements/edx/testing.txt b/requirements/edx/testing.txt
index 8bc774cc21..ef59328711 100644
--- a/requirements/edx/testing.txt
+++ b/requirements/edx/testing.txt
@@ -62,7 +62,7 @@ botocore==1.8.17
 caniusepython3==7.0.0
 celery==3.1.25
 certifi==2019.3.9
-cffi==1.12.2
+cffi==1.12.3
 chardet==3.0.4
 click-log==0.3.2          # via edx-lint
 click==7.0