diff --git a/ci/requirements.txt b/ci/requirements.txt
index 6b17aa52..dd6d9b9a 100644
--- a/ci/requirements.txt
+++ b/ci/requirements.txt
@@ -2,3 +2,4 @@ c2cciutils[checks,publish]==1.6.13
 pre-commit==3.4.0
 certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
+cryptography>=42.0.0 # not directly required, pinned by Snyk to avoid a vulnerability