diff --git a/requirements/tests.txt b/requirements/tests.txt
index 728e4d53433e..8cf5f483ba06 100644
--- a/requirements/tests.txt
+++ b/requirements/tests.txt
@@ -120,3 +120,4 @@ wcwidth==0.2.5 \
 toml==0.10.2 \
     --hash=sha256:806143ae5bfb6a3c6e736a764057db0e6a0e05e338b5630894a5f779cabb4f9b \
     --hash=sha256:b3bda1d108d5dd99f4a20d24d9c348e91c4db7ab1b749200bded2f839ccbe68f
+cryptography>=46.0.5 # not directly required, pinned by Snyk to avoid a vulnerability