diff --git a/requirements.txt b/requirements.txt
index 931174c..3f43dc8 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -29,3 +29,4 @@ cos-python-sdk-v5==1.9.25
 
 # thrid-party, for cve fixing
 pyasn1>=0.6.2
+cbor2>=5.9.0