diff --git a/requirements.txt b/requirements.txt
index de77529e..ee414732 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -38,3 +38,4 @@ zope.interface==5.4.0
 
 git+https://github.com/krkn-chaos/arcaflow-plugin-kill-pod.git
 git+https://github.com/vmware/vsphere-automation-sdk-python.git@v8.0.0.0
+cryptography>=42.0.2 # not directly required, pinned by Snyk to avoid a vulnerability