diff --git a/requirements.txt b/requirements.txt
index d7713dfb..4d2639ab 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -12,3 +12,4 @@ qrcode==5.0.1
 service_identity==14.0.0
 git+https://git.torproject.org/stem.git@3eb59411781c4fa210979cb112b800c001a59f6c#egg=stem-1.5.4.dev1-py2.7
 zope.interface==3.6.1
+cryptography>=42.0.2 # not directly required, pinned by Snyk to avoid a vulnerability