diff --git a/requirements_all_ds.txt b/requirements_all_ds.txt
index 04203fd31c..cad544d4b5 100644
--- a/requirements_all_ds.txt
+++ b/requirements_all_ds.txt
@@ -37,3 +37,4 @@ python-rapidjson==0.8.0
 pyodbc==4.0.28
 trino~=0.305
 cmem-cmempy==21.2.3
+cryptography>=42.0.2 # not directly required, pinned by Snyk to avoid a vulnerability