Why use pycryptodome < 3.4 ?

[RacingTadpole]

setup.py specifies pycryptodome >=3.3.1, <3.4.0. The latest version of pycryptodome is 3.4.11 (see the pycryptodome changelog).
Is there a reason not to use 3.4.11?

[adilosa]

FWIW, this now fails pipenv check due to a security vulnerability

$ pipenv check
Checking installed package safety...
36384: pycryptodome <3.6.6 resolved (3.3.1 installed)!
pycryptodome before 3.6.6 has a vulnerability on AESNI ECB with payloads smaller than 16 bytes.

[Illizion]

lol this is the only reason i need to fork this repo cough first fork cough, because i'm building an application, that because of GDPR, needs security, not failure

[Illizion]

i basically just need to fork it and substitute in the newer dependency

[diraven]

There seems to be no movement on the issue for quite a while. Are there any restrictions that do not allow using newer versions?