diff --git a/3rdparty/python/requirements.txt b/3rdparty/python/requirements.txt
index e50da50f4aa..e62f38cc05f 100644
--- a/3rdparty/python/requirements.txt
+++ b/3rdparty/python/requirements.txt
@@ -39,3 +39,4 @@ six>=1.9.0,<2
 subprocess32==3.2.7 ; python_version<'3'
 wheel==0.31.1
 www-authenticate==0.9.2
+cryptography>=39.0.1 # not directly required, pinned by Snyk to avoid a vulnerability