diff --git a/requirements/edx-sandbox/base.txt b/requirements/edx-sandbox/base.txt
index 6ff0a3af848c165bbc433de1aeaffef404724557..804988efe0257161955e72ae69d527482f78069b 100644
--- a/requirements/edx-sandbox/base.txt
+++ b/requirements/edx-sandbox/base.txt
@@ -11,7 +11,7 @@ common/lib/symmath
 asn1crypto==0.24.0
 backports-abc==0.5        # via tornado
 cffi==1.11.5
-cryptography==2.3.1
+cryptography==2.4.2
 enum34==1.1.6
 futures==3.2.0            # via tornado
 idna==2.7
@@ -20,14 +20,14 @@ lxml==3.8.0
 markupsafe==1.1.0
 matplotlib==1.3.1
 networkx==1.7
-nltk==3.3.0
+nltk==3.4
 nose==1.3.7               # via matplotlib
 numpy==1.6.2
 pycparser==2.19
 pyparsing==2.2.0
 python-dateutil==2.7.5    # via matplotlib
 scipy==0.14.0
-singledispatch==3.4.0.3   # via tornado
+singledispatch==3.4.0.3
 six==1.11.0
 sympy==0.7.1
 tornado==5.1.1            # via matplotlib
diff --git a/requirements/edx-sandbox/shared.txt b/requirements/edx-sandbox/shared.txt
index cd624e6a2781bedd9492c6b78d58975e2d360430..45b0807f46e9f546b0dfb69d22695784207b6fdc 100644
--- a/requirements/edx-sandbox/shared.txt
+++ b/requirements/edx-sandbox/shared.txt
@@ -10,17 +10,18 @@
 -e common/lib/symmath
 asn1crypto==0.24.0        # via cryptography
 cffi==1.11.5              # via cryptography
-cryptography==2.3.1
+cryptography==2.4.2
 enum34==1.1.6             # via cryptography
 idna==2.7                 # via cryptography
 ipaddress==1.0.22         # via cryptography
 lxml==3.8.0
 markupsafe==1.1.0
 networkx==1.7
-nltk==3.3.0
+nltk==3.4
 numpy==1.6.2
 pycparser==2.19           # via cffi
 pyparsing==2.2.0
 scipy==0.14.0
-six==1.11.0               # via cryptography, nltk
+singledispatch==3.4.0.3   # via nltk
+six==1.11.0               # via cryptography, nltk, singledispatch
 sympy==0.7.1
diff --git a/requirements/edx/base.in b/requirements/edx/base.in
index abc6255eee0df30fb9afe27d624c93e3e598487c..699fb302f857b27aebc171762c9d344f66e3325b 100644
--- a/requirements/edx/base.in
+++ b/requirements/edx/base.in
@@ -112,7 +112,7 @@ py2neo<4.0.0                       # Used to communicate with Neo4j, which is us
 PyContracts==1.7.1
 pycountry==1.20
 pycryptodomex==3.4.7
-pygments==2.2.0                     # Used to support colors in paver command output
+pygments                            # Used to support colors in paver command output
 pygraphviz==1.1                     # No longer in use?  Optional dependency of networkx, from edx-sandbox/shared.in
 pyjwkest==1.3.2
 # TODO Replace PyJWT usage with pyjwkest
diff --git a/requirements/edx/base.txt b/requirements/edx/base.txt
index dcfe1bbf99d8d90369357420ee2d00a801fae236..20656c1226d73a6eb27b420d7f9fc1aad6e2fb37 100644
--- a/requirements/edx/base.txt
+++ b/requirements/edx/base.txt
@@ -56,14 +56,14 @@ boto3==1.4.8
 boto==2.39.0
 botocore==1.8.17
 celery==3.1.25
-certifi==2018.10.15
+certifi==2018.11.29
 cffi==1.11.5
 charade==1.0.3            # via pysrt
 chardet==3.0.4
 click==7.0                # via user-util
 coreapi==2.3.3            # via django-rest-swagger, openapi-codec
 coreschema==0.0.4         # via coreapi
-cryptography==2.3.1
+cryptography==2.4.2
 cssutils==1.0.2           # via pynliner
 ddt==1.2.0
 decorator==4.3.0          # via dogapi, pycontracts
@@ -125,7 +125,7 @@ edx-oauth2-provider==1.2.2
 edx-opaque-keys[django]==0.4.4
 edx-organizations==1.0.0
 edx-proctoring==1.4.0
-edx-rest-api-client==1.9.1
+edx-rest-api-client==1.9.2
 edx-search==1.2.1
 edx-submissions==2.0.12
 edx-user-state-client==1.0.4
@@ -144,7 +144,7 @@ gunicorn==19.0
 hash-ring==1.3.1          # via django-memcached-hashring
 help-tokens==1.0.3
 html5lib==1.0.1
-httplib2==0.11.3          # via oauth2, zendesk
+httplib2==0.12.0          # via oauth2, zendesk
 idna==2.7
 ipaddr==2.1.11
 ipaddress==1.0.22
@@ -169,8 +169,8 @@ mock==1.0.1
 mongoengine==0.10.0
 mysql-python==1.2.5
 networkx==1.7
-newrelic==4.4.1.104
-nltk==3.3.0
+newrelic==4.8.0.110
+nltk==3.4
 nodeenv==1.1.1
 numpy==1.6.2
 oauth2==1.9.0.post1
@@ -190,7 +190,7 @@ pycontracts==1.7.1
 pycountry==1.20
 pycparser==2.19
 pycryptodomex==3.4.7
-pygments==2.2.0
+pygments==2.3.0
 pygraphviz==1.1
 pyjwkest==1.3.2
 pyjwt==1.5.2
@@ -208,9 +208,9 @@ pytz==2016.10
 pyuca==1.1
 pyyaml==3.13
 redis==2.10.6
-reportlab==3.5.9
+reportlab==3.5.12
 requests-oauthlib==1.0.0
-requests==2.20.0
+requests==2.20.1
 rest-condition==1.0.3
 rfc6266-parser==0.0.5.post2
 rules==2.0
@@ -221,6 +221,7 @@ semantic-version==2.6.0   # via edx-drf-extensions
 shapely==1.2.16
 shortuuid==0.5.0          # via edx-django-oauth2-provider
 simplejson==3.16.0        # via django-rest-swagger, dogapi, mailsnake, sailthru-client, zendesk
+singledispatch==3.4.0.3
 six==1.11.0
 slumber==0.7.1            # via edx-rest-api-client
 social-auth-app-django==2.1.0
@@ -239,7 +240,7 @@ voluptuous==0.11.5
 watchdog==0.9.0
 web-fragments==0.2.2
 webencodings==0.5.1       # via html5lib
-webob==1.8.3              # via xblock
+webob==1.8.4              # via xblock
 wrapt==1.10.5
 xblock-review==1.1.5
 xblock-utils==1.2.0
diff --git a/requirements/edx/coverage.txt b/requirements/edx/coverage.txt
index 583c1c09a96b1423added80138a91db1f5902548..8ff966dba7680d06887b3e4b59559c521235235c 100644
--- a/requirements/edx/coverage.txt
+++ b/requirements/edx/coverage.txt
@@ -6,9 +6,9 @@
 #
 coverage==4.4
 diff-cover==0.9.8
-inflect==1.0.1            # via jinja2-pluralize
+inflect==2.1.0            # via jinja2-pluralize
 jinja2-pluralize==0.3.0   # via diff-cover
 jinja2==2.10              # via diff-cover, jinja2-pluralize
 markupsafe==1.1.0         # via jinja2
-pygments==2.2.0           # via diff-cover
+pygments==2.3.0           # via diff-cover
 six==1.11.0               # via diff-cover
diff --git a/requirements/edx/development.txt b/requirements/edx/development.txt
index ccafd862906138b37c821b5b7bd92a11201e8e21..58582ad4a6fc57e4967a9eca73411443b3c24ae9 100644
--- a/requirements/edx/development.txt
+++ b/requirements/edx/development.txt
@@ -66,7 +66,7 @@ boto3==1.4.8
 boto==2.39.0
 botocore==1.8.17
 celery==3.1.25
-certifi==2018.10.15
+certifi==2018.11.29
 cffi==1.11.5
 charade==1.0.3
 chardet==3.0.4
@@ -78,7 +78,7 @@ constantly==15.1.0
 coreapi==2.3.3
 coreschema==0.0.4
 coverage==4.4
-cryptography==2.3.1
+cryptography==2.4.2
 cssselect==1.0.3
 cssutils==1.0.2
 ddt==1.2.0
@@ -145,7 +145,7 @@ edx-oauth2-provider==1.2.2
 edx-opaque-keys[django]==0.4.4
 edx-organizations==1.0.0
 edx-proctoring==1.4.0
-edx-rest-api-client==1.9.1
+edx-rest-api-client==1.9.2
 edx-search==1.2.1
 edx-sphinx-theme==1.3.0
 edx-submissions==2.0.12
@@ -157,7 +157,7 @@ event-tracking==0.2.7
 execnet==1.5.0
 extras==1.0.0
 factory_boy==2.8.1
-faker==0.9.2
+faker==1.0.0
 feedparser==5.1.3
 filelock==3.0.10
 firebase-token-generator==1.3.2
@@ -178,12 +178,12 @@ gunicorn==19.0
 hash-ring==1.3.1
 help-tokens==1.0.3
 html5lib==1.0.1
-httplib2==0.11.3
+httplib2==0.12.0
 httpretty==0.9.6
 idna==2.7
 imagesize==1.1.0          # via sphinx
 incremental==17.5.0
-inflect==1.0.1
+inflect==2.1.0
 ipaddr==2.1.11
 ipaddress==1.0.22
 isodate==0.6.0
@@ -217,8 +217,8 @@ more-itertools==4.3.0
 moto==0.3.1
 mysql-python==1.2.5
 networkx==1.7
-newrelic==4.4.1.104
-nltk==3.3.0
+newrelic==4.8.0.110
+nltk==3.4
 nodeenv==1.1.1
 numpy==1.6.2
 oauth2==1.9.0.post1
@@ -249,7 +249,7 @@ pycparser==2.19
 pycryptodomex==3.4.7
 pydispatcher==2.0.5
 pyflakes==2.0.0
-pygments==2.2.0
+pygments==2.3.0
 pygraphviz==1.1
 pyinotify==0.9.6
 pyjwkest==1.3.2
@@ -270,7 +270,7 @@ pytest-cov==2.5.1
 pytest-django==3.1.2
 pytest-forked==0.2
 pytest-randomly==1.2.3
-pytest-xdist==1.24.0
+pytest-xdist==1.24.1
 pytest==3.6.3
 python-dateutil==2.4.0
 python-levenshtein==0.12.0
@@ -287,9 +287,9 @@ pyyaml==3.13
 queuelib==1.5.0
 radon==2.4.0
 redis==2.10.6
-reportlab==3.5.9
+reportlab==3.5.12
 requests-oauthlib==1.0.0
-requests==2.20.0
+requests==2.20.1
 rest-condition==1.0.3
 rfc6266-parser==0.0.5.post2
 rules==2.0
@@ -312,9 +312,9 @@ social-auth-app-django==2.1.0
 social-auth-core==1.7.0
 sorl-thumbnail==12.3
 sortedcontainers==0.9.2
-sphinx==1.8.1
+sphinx==1.8.2
 sphinxcontrib-websupport==1.1.0  # via sphinx
-splinter==0.9.0
+splinter==0.10.0
 sqlparse==0.2.4
 stevedore==1.10.0
 sure==1.4.11
@@ -331,7 +331,7 @@ transifex-client==0.13.5
 twisted==16.6.0
 typing==3.6.6             # via sphinx
 unicodecsv==0.14.1
-unidecode==1.0.22
+unidecode==1.0.23
 unittest2==1.1.0
 uritemplate==3.0.0
 urllib3==1.23
@@ -344,7 +344,7 @@ w3lib==1.19.0
 watchdog==0.9.0
 web-fragments==0.2.2
 webencodings==0.5.1
-webob==1.8.3
+webob==1.8.4
 werkzeug==0.14.1
 wrapt==1.10.5
 xblock-review==1.1.5
diff --git a/requirements/edx/paver.txt b/requirements/edx/paver.txt
index eacdca380a26970f18f2a305dab50bf5fd2c8d9d..892869ec46fda14520929387e7e05a6c89c151c8 100644
--- a/requirements/edx/paver.txt
+++ b/requirements/edx/paver.txt
@@ -6,7 +6,7 @@
 #
 argh==0.26.2              # via watchdog
 argparse==1.4.0           # via stevedore
-certifi==2018.10.15       # via requests
+certifi==2018.11.29       # via requests
 chardet==3.0.4            # via requests
 edx-opaque-keys==0.4.4
 idna==2.7                 # via requests
@@ -22,7 +22,7 @@ psutil==1.2.1
 pymongo==2.9.1
 python-memcached==1.48
 pyyaml==3.13              # via watchdog
-requests==2.20.0
+requests==2.20.1
 six==1.11.0               # via edx-opaque-keys, libsass, paver, stevedore
 stevedore==1.10.0
 urllib3==1.23
diff --git a/requirements/edx/testing.txt b/requirements/edx/testing.txt
index 557f11ad8b7b96611abde25cea4e6f910afe26a6..7d90ca2b51519aef7cccd414c72f9f727197abe7 100644
--- a/requirements/edx/testing.txt
+++ b/requirements/edx/testing.txt
@@ -63,7 +63,7 @@ boto3==1.4.8
 boto==2.39.0
 botocore==1.8.17
 celery==3.1.25
-certifi==2018.10.15
+certifi==2018.11.29
 cffi==1.11.5
 charade==1.0.3
 chardet==3.0.4
@@ -75,7 +75,7 @@ constantly==15.1.0        # via twisted
 coreapi==2.3.3
 coreschema==0.0.4
 coverage==4.4
-cryptography==2.3.1
+cryptography==2.4.2
 cssselect==1.0.3
 cssutils==1.0.2
 ddt==1.2.0
@@ -140,7 +140,7 @@ edx-oauth2-provider==1.2.2
 edx-opaque-keys[django]==0.4.4
 edx-organizations==1.0.0
 edx-proctoring==1.4.0
-edx-rest-api-client==1.9.1
+edx-rest-api-client==1.9.2
 edx-search==1.2.1
 edx-submissions==2.0.12
 edx-user-state-client==1.0.4
@@ -151,7 +151,7 @@ event-tracking==0.2.7
 execnet==1.5.0            # via pytest-xdist
 extras==1.0.0             # via python-subunit, testtools
 factory_boy==2.8.1
-faker==0.9.2              # via factory-boy
+faker==1.0.0              # via factory-boy
 feedparser==5.1.3
 filelock==3.0.10          # via tox
 firebase-token-generator==1.3.2
@@ -172,11 +172,11 @@ gunicorn==19.0
 hash-ring==1.3.1
 help-tokens==1.0.3
 html5lib==1.0.1
-httplib2==0.11.3
+httplib2==0.12.0
 httpretty==0.9.6
 idna==2.7
 incremental==17.5.0       # via twisted
-inflect==1.0.1
+inflect==2.1.0
 ipaddr==2.1.11
 ipaddress==1.0.22
 isodate==0.6.0
@@ -209,8 +209,8 @@ more-itertools==4.3.0     # via pytest
 moto==0.3.1
 mysql-python==1.2.5
 networkx==1.7
-newrelic==4.4.1.104
-nltk==3.3.0
+newrelic==4.8.0.110
+nltk==3.4
 nodeenv==1.1.1
 numpy==1.6.2
 oauth2==1.9.0.post1
@@ -239,7 +239,7 @@ pycparser==2.19
 pycryptodomex==3.4.7
 pydispatcher==2.0.5       # via scrapy
 pyflakes==2.0.0           # via flake8
-pygments==2.2.0
+pygments==2.3.0
 pygraphviz==1.1
 pyjwkest==1.3.2
 pyjwt==1.5.2
@@ -259,7 +259,7 @@ pytest-cov==2.5.1
 pytest-django==3.1.2
 pytest-forked==0.2        # via pytest-xdist
 pytest-randomly==1.2.3
-pytest-xdist==1.24.0
+pytest-xdist==1.24.1
 pytest==3.6.3
 python-dateutil==2.4.0
 python-levenshtein==0.12.0
@@ -276,9 +276,9 @@ pyyaml==3.13
 queuelib==1.5.0           # via scrapy
 radon==2.4.0
 redis==2.10.6
-reportlab==3.5.9
+reportlab==3.5.12
 requests-oauthlib==1.0.0
-requests==2.20.0
+requests==2.20.1
 rest-condition==1.0.3
 rfc6266-parser==0.0.5.post2
 rules==2.0
@@ -299,7 +299,7 @@ social-auth-app-django==2.1.0
 social-auth-core==1.7.0
 sorl-thumbnail==12.3
 sortedcontainers==0.9.2
-splinter==0.9.0
+splinter==0.10.0
 sqlparse==0.2.4
 stevedore==1.10.0
 sure==1.4.11
@@ -315,7 +315,7 @@ traceback2==1.4.0         # via testtools, unittest2
 transifex-client==0.13.5
 twisted==16.6.0           # via pa11ycrawler, scrapy
 unicodecsv==0.14.1
-unidecode==1.0.22         # via python-slugify
+unidecode==1.0.23         # via python-slugify
 unittest2==1.1.0          # via testtools
 uritemplate==3.0.0
 urllib3==1.23
@@ -327,7 +327,7 @@ w3lib==1.19.0             # via parsel, scrapy
 watchdog==0.9.0
 web-fragments==0.2.2
 webencodings==0.5.1
-webob==1.8.3
+webob==1.8.4
 werkzeug==0.14.1          # via flask
 wrapt==1.10.5
 xblock-review==1.1.5