Can a new version be created to incorporate the cryptography package update to 43.0.1? The older cryptography package 43.0.0 causes a CVE