diff --git a/requirements.txt b/requirements.txt
index 4227d1344..3a01538db 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,3 +4,4 @@ lxml>=5.3.0
 
 # For algorithm extraction from certificate pages
 crawl4ai>=0.4.0
+pyopenssl>=26.0.0 # not directly required, pinned by Snyk to avoid a vulnerability