https://nvd.nist.gov/vuln/detail/CVE-2026-26007 has been reported which is fixed in Cryptography v46.0.5.
However the latest version of oci still requires a version <46.
This is the output from pip check:
oci 2.167.1 has requirement cryptography<46.0.0,>=3.2.1, but you have cryptography 46.0.5.
Please bump the maximum supported version or drop it entirely.