diff --git a/requirements/requirements.in b/requirements/requirements.in
index 0c74b18384..685d04aef5 100644
--- a/requirements/requirements.in
+++ b/requirements/requirements.in
@@ -6,7 +6,7 @@ asyncpg
 azure-keyvault==1.1.0  # see UPGRADE BLOCKERs
 channels
 channels-redis==3.4.1  # see UPGRADE BLOCKERs
-cryptography
+cryptography>=39.0.1 ## https://github.com/ansible/awx/security/dependabot/90
 Cython<3 # Since the bump to PyYAML 5.4.1 this is now a mandatory dep
 daphne
 distro
diff --git a/requirements/requirements.txt b/requirements/requirements.txt
index e25097230d..097658cf3f 100644
--- a/requirements/requirements.txt
+++ b/requirements/requirements.txt
@@ -70,7 +70,7 @@ click==8.1.3
     # via receptorctl
 constantly==15.1.0
     # via twisted
-cryptography==38.0.4
+cryptography==40.0.2
     # via
     #   -r /awx_devel/requirements/requirements.in
     #   adal
@@ -295,7 +295,7 @@ pyjwt==2.6.0
     #   adal
     #   social-auth-core
     #   twilio
-pyopenssl==22.1.0
+pyopenssl==23.1.1
     # via twisted
 pyparsing==2.4.6
     # via