diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index e579e3ede5..c63d3a8aba 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -74,7 +74,7 @@ pycodestyle<2.9.0
 pyopenssl==22.0.0
 
 
-# right now lots of packages have major upgrades and lots of tests failing.
-# so adding following constraints and will unpin one by one.
+cryptography==38.0.4 # greater version has some issues with openssl.
+
+bleach[css]==5.0.1 # greater version has some breaking changes.
 
-cryptography==38.0.4 # greater version has some issues.