diff --git a/apps/firehose_to_es_processor/requirements.txt b/apps/firehose_to_es_processor/requirements.txt
index b218954..8737494 100644
--- a/apps/firehose_to_es_processor/requirements.txt
+++ b/apps/firehose_to_es_processor/requirements.txt
@@ -5,3 +5,4 @@ retrying==1.3.3
 airbrake==2.1.0
 urllib3>=1.23
 dcplib
+cryptography>=42.0.2 # not directly required, pinned by Snyk to avoid a vulnerability