diff --git a/tox.ini b/tox.ini
index 12df9d3b..6b5df1a0 100644
--- a/tox.ini
+++ b/tox.ini
@@ -111,7 +111,7 @@ usedevelop = False
 skip_install = True
 deps =
     -r{toxinidir}/test-requirements.txt
-    flake8-bugbear
+    flake8-bugbear<23.2.13
 commands =
     flake8
 
@@ -150,8 +150,9 @@ commands =
 allowlist_externals = rm
 
 [bandit]
+# B324: hashlib
 # B411: blacklist Using xmlrpclib
-skips = B411
+skips = B324,B411
 
 [testenv:bandit]
 description = Bandit code scan for *.py files under config folder