diff --git a/tox.ini b/tox.ini
index 4a4eadaa1a..8411f2ca0b 100644
--- a/tox.ini
+++ b/tox.ini
@@ -34,7 +34,8 @@ deps =
     universal2: AccessControl
     universal2: zodbpickle
     universal2: charset_normalizer
-    universal2: MarkupSafe
+    universal2: MarkupSafe==2.1.5; python_version == '3.8'
+    universal2: MarkupSafe==3.0.1; python_version > '3.8'
     universal2: zope.testrunner
 setenv =
 commands_pre =