diff --git a/packages/grafeas/setup.py b/packages/grafeas/setup.py
index 3e34cbb7f6e6..d1d7afb2ed45 100644
--- a/packages/grafeas/setup.py
+++ b/packages/grafeas/setup.py
@@ -26,7 +26,7 @@
 dependencies = [
     "google-api-core[grpc] >= 1.32.0, <3.0.0dev,!=2.0.*,!=2.1.*,!=2.2.*,!=2.3.*,!=2.4.*,!=2.5.*,!=2.6.*,!=2.7.*",
     "proto-plus >= 1.22.0, <2.0.0dev",
-    "protobuf >= 3.20.2, <5.0.0dev",
+    "protobuf>=3.19.5,<5.0.0dev,!=3.20.0,!=3.20.1,!=4.21.0,!=4.21.1,!=4.21.2,!=4.21.3,!=4.21.4,!=4.21.5",
 ]
 
 package_root = os.path.abspath(os.path.dirname(__file__))
diff --git a/packages/grafeas/testing/constraints-3.7.txt b/packages/grafeas/testing/constraints-3.7.txt
index 260e08b9e419..5dcaa6fd1884 100644
--- a/packages/grafeas/testing/constraints-3.7.txt
+++ b/packages/grafeas/testing/constraints-3.7.txt
@@ -7,4 +7,4 @@
 # Then this file should have foo==1.14.0
 google-api-core==1.32.0
 proto-plus==1.22.0
-protobuf==3.20.2
+protobuf==3.19.5