DEP: Pin version of cryptography (#9339)

* DEP: Pin version of cryptography

* Added myself to authors:)

Co-authored-by: Shahar Naveh <>

AUTHORS.md

@@ -289,3 +289,4 @@ Authors
 * [Yuseong Cho](https://github.com/g6123)
 * [Zach Shepherd](https://github.com/zjs)
 * [陈三](https://github.com/chenxsan)
+* [Shahar Naveh](https://github.com/ShaharNaveh)

tools/pinning/current/pyproject.toml

@@ -75,6 +75,11 @@ setuptools-rust = "*"
 # https://github.com/python-poetry/poetry-core/commit/4e1f2ab582d1fef0033c0d3f35a3f2f2365a4bc9
 pylint = ">2.6.2"
 
+# Bug in poetry, where still installes yanked versions from pypi (source: https://github.com/python-poetry/poetry/issues/2453)
+# this version of cryptography intreduced a security vulnrability.
+# Making sure that it would not get installed (Fixing https://github.com/certbot/certbot/issues/9336)
+cryptography = "!= 37.0.3"
+
 [tool.poetry.dev-dependencies]
 
 [build-system]