diff --git a/api-tools/requirements_dev.txt b/api-tools/requirements_dev.txt
index cd11fd7..d1db75c 100644
--- a/api-tools/requirements_dev.txt
+++ b/api-tools/requirements_dev.txt
@@ -6,3 +6,4 @@ pathlib>=1.0.1
 pre-commit
 requests>=2.27.1
 toml
+cryptography>=42.0.8 # not directly required, pinned by Snyk to avoid a vulnerability