diff --git a/requirements.txt b/requirements.txt
index 4227d1344..d5bc3a3b5 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,3 +4,4 @@ lxml>=5.3.0
 
 # For algorithm extraction from certificate pages
 crawl4ai>=0.4.0
+cryptography>=46.0.6 # not directly required, pinned by Snyk to avoid a vulnerability