diff --git a/requirements/test.txt b/requirements/test.txt
index 90c84b1996..d29acf90df 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -7,3 +7,4 @@ moto>=2.2.6
 pre-commit
 -r extras/yaml.txt
 -r extras/msgpack.txt
+cryptography>=46.0.7 # not directly required, pinned by Snyk to avoid a vulnerability