diff --git a/releases.yml b/releases.yml
index 6245e42596..85844f70a1 100644
--- a/releases.yml
+++ b/releases.yml
@@ -15,6 +15,11 @@ releases:
           metadata: 139356
           microshift: 139357
           rpm: 139358
+        dependencies:
+          rpms:
+          - el9: python-webob-1.8.8-2.el9
+            why: "pin for CVE fix"
+            non_gc_tag: "rhaos-4.15-ironic-rhel-9"
         release_jira: ART-10852
         upgrades: 4.14.16,4.14.17,4.14.18,4.14.19,4.14.20,4.14.21,4.14.22,4.14.23,4.14.24,4.14.25,4.14.26,4.14.27,4.14.28,4.14.29,4.14.30,4.14.31,4.14.32,4.14.33,4.14.34,4.14.35,4.14.36,4.14.37,4.14.38,4.15.0,4.15.2,4.15.3,4.15.5,4.15.6,4.15.7,4.15.8,4.15.9,4.15.10,4.15.11,4.15.12,4.15.13,4.15.14,4.15.15,4.15.16,4.15.17,4.15.18,4.15.19,4.15.20,4.15.21,4.15.22,4.15.23,4.15.24,4.15.25,4.15.26,4.15.27,4.15.28,4.15.29,4.15.30,4.15.31,4.15.32,4.15.33,4.15.34
       members: