diff --git a/requirements.txt b/requirements.txt
index ca1c8ced..e7424ef4 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -49,3 +49,4 @@ elastic-transport==8.17
 litellm==1.83.0
 strawberry-graphql==0.285.0
 strawberry-graphql-django==0.67.0
+cryptography>=48.0.1 # not directly required, pinned by Snyk to avoid a vulnerability