diff --git a/tests/requirements.txt b/tests/requirements.txt
index bd72c8c46..398d1d16d 100644
--- a/tests/requirements.txt
+++ b/tests/requirements.txt
@@ -3,7 +3,7 @@ attrs
 dataclasses; python_version == '3.6'
 pyftpdlib
 pytest
-pytest-cov
+pytest-cov==3.0.0
 pytest-xdist
 sybil >= 1.3.0  # https://github.com/cjw296/sybil/issues/20#issuecomment-605433422
 testfixtures
diff --git a/tox.ini b/tox.ini
index fcd3563b2..db151f215 100644
--- a/tox.ini
+++ b/tox.ini
@@ -49,7 +49,7 @@ commands =
 [testenv:security]
 basepython = python3
 deps =
-    bandit
+    bandit==1.7.3
 commands =
     bandit -r -c .bandit.yml {posargs:scrapy}
 
@@ -68,7 +68,7 @@ commands =
 basepython = python3
 deps =
     {[testenv:extra-deps]deps}
-    pylint==2.12.1
+    pylint==2.12.2
 commands =
     pylint conftest.py docs extras scrapy setup.py tests