diff --git a/docs/version_history.md b/docs/version_history.md
index 270922c..d96b3bd 100644
--- a/docs/version_history.md
+++ b/docs/version_history.md
@@ -2,6 +2,10 @@
 
 ## Version History
 
+#### 0.16.0
+* Fixed **[Issue 124](https://github.com/Venafi/vcert-python/issues/124)**: Fixed an issue where adding a Certificate Issuing Template to an existing Application failed
+* Upgraded cryptography dependency to 40.0.2 to cover a security risk CVE-2023-23931
+* Removed orgUnit field from AppDetails, as Venafi as a Service dropped the use of the field
 #### 0.15.0
 * Fixed **[Issue 100](https://github.com/Venafi/vcert-python/issues/100)**: Updated behavior for 'serviceGenerated' attribute on VaaS
 * Fixed **[Issue 101](https://github.com/Venafi/vcert-python/issues/101)**: Added support for the following Subject Alternative Names when creating a policy on VaaS: email, IP, URI
diff --git a/setup.py b/setup.py
index 88a0204..6f6965e 100644
--- a/setup.py
+++ b/setup.py
@@ -14,8 +14,8 @@
       version='0.15.0',
       url="https://github.com/Venafi/vcert-python",
       packages=['vcert', 'vcert.parser', 'vcert.policy'],
-      install_requires=['requests==2.27.1', 'python-dateutil==2.8.2', 'certvalidator<=0.11.1', 'six==1.16.0',
-                        'cryptography==36.0.1', 'ruamel.yaml==0.17.20', 'pynacl==1.5.0'],
+      install_requires=['requests==2.31.0', 'python-dateutil==2.8.2', 'certvalidator<=0.11.1', 'six==1.16.0',
+                        'cryptography==40.0.2', 'ruamel.yaml==0.17.31', 'pynacl==1.5.0'],
       description='Python client library for Venafi Trust Protection Platform and Venafi Cloud.',
       long_description=long_description,
       long_description_content_type="text/markdown",
diff --git a/vcert/connection_cloud.py b/vcert/connection_cloud.py
index c05a595..d7f93d9 100644
--- a/vcert/connection_cloud.py
+++ b/vcert/connection_cloud.py
@@ -654,7 +654,7 @@ def set_policy(self, zone, policy_spec):
             if app_details.cit_alias_id_map:
                 # Only link cit with Application when cit is not already associated with Application
                 cit_map = app_details.cit_alias_id_map
-                cit_id, cit_name = get_cit_data_from_response(cit_data)
+                cit_id, cit_name = get_cit_data_from_response(resp_cit_data)
                 cit_map[cit_name] = cit_id
             app_req = build_app_update_request(app_details, cit_map)
             status, data = self._put(URLS.APP_BY_ID.format(app_details.app_id), app_req)