diff --git a/requirements.txt b/requirements.txt
index 56933c9..fa89df6 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,2 +1,3 @@
 PyGObject>=3.40.1
 paramiko>=2.11.0
+cryptography>=46.0.5 # not directly required, pinned by Snyk to avoid a vulnerability