diff --git a/python-fastapi.spec b/python-fastapi.spec
index 79fe152..48199e9 100644
--- a/python-fastapi.spec
+++ b/python-fastapi.spec
@@ -285,9 +285,6 @@ Summary(zh):    %{sum_zh}
 # packaged in Fedora until it builds with the stable Rust toolchain instead of
 # the nightly one. Note that this removes it from the “all” extra metapackage.
 sed -r -i 's/("orjson\b.*",)/# \1/' pyproject.toml
-# Loosen all dependencies that are pinned to exact versions. We have to try to
-# work with what is packaged.
-#sed -r -i 's/==/>=/g' pyproject.toml
 # Comment out test dependencies that are only for linting/formatting/analysis,
 # and will not be used.
 sed -r -i 's/("(mypy|black|flake8|isort|autoflake)\b.*",)/# \1/' pyproject.toml
@@ -295,10 +292,7 @@ sed -r -i 's/("(mypy|black|flake8|isort|autoflake)\b.*",)/# \1/' pyproject.toml
 # auto-generated PEP 561 stub packages:
 sed -r -i 's/("types-(u|or)json\b.*",)/# \1/' pyproject.toml
 # Selectively allow newer versions for certain tightly-pinned dependencies:
-# See also, for ujson:
-#   https://github.com/tiangolo/fastapi/issues/820
-#   https://github.com/advisories/GHSA-fh56-85cw-5pq6 (security issue in ujson<5.1.0)
-sed -r -i 's/("((httpx|pytest|ujson)\b)[^<"]*),[[:blank:]]*<[^"]*/\1/' pyproject.toml
+sed -r -i 's/("((httpx|pytest)\b)[^<"]*),[[:blank:]]*<[^"]*/\1/' pyproject.toml
 
 # Remove bundled js-termynal 0.0.1; since we are not building documentation, we
 # do this very bluntly: