diff --git a/backend/requirements.txt b/backend/requirements.txt
index ce55d2d347a..53ab9f7fac5 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -138,3 +138,4 @@ opentelemetry-instrumentation-requests==0.53b1
 opentelemetry-instrumentation-logging==0.53b1
 opentelemetry-instrumentation-httpx==0.53b1
 opentelemetry-instrumentation-aiohttp-client==0.53b1
+cryptography>=46.0.5 # not directly required, pinned by Snyk to avoid a vulnerability