diff --git a/pyproject.toml b/pyproject.toml
index 56148155..b667868d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -37,7 +37,7 @@ dependencies = [
   "jsonschema>=4.9.1",
   "urllib3>=1.25.10",
   "semantic-version>=2.10.0",
-  "oras>=0.2.31",
+  "oras<=0.2.31",
   "python-qpid-proton>=0.39.0"
 ]
 
diff --git a/requirements.txt b/requirements.txt
index 75bb4b60..d5b5ec75 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,5 +9,5 @@ subresource-integrity>=0.2
 jsonschema>=4.9.1
 urllib3>=1.25.10
 semantic-version>=2.10.0
-oras>=0.2.31
+oras<=0.2.31
 python-qpid-proton>=0.39.0
\ No newline at end of file
diff --git a/setup.py b/setup.py
index ee5eac4b..3935d97b 100755
--- a/setup.py
+++ b/setup.py
@@ -58,7 +58,7 @@
         "jsonschema>=4.9.1",
         "urllib3>=1.25.10",
         "semantic-version>=2.10.0",
-        "oras>=0.2.31",
+        "oras<=0.2.31",
         "python-qpid-proton>=0.39.0"
     ],
 )