diff --git a/requirements.txt b/requirements.txt
index ff0d359..9c9aec2 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,3 +1,4 @@
 paramiko==2.10.4
 tornado==5.1.1; python_version < '3.5'
 tornado==6.1.0; python_version >= '3.5'
+cryptography>=39.0.1 # not directly required, pinned by Snyk to avoid a vulnerability