diff --git a/requirements.txt b/requirements.txt
index aa99543d..05cc04bd 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -32,3 +32,4 @@ dj-static==0.0.6
 dj-database-url==0.5.0
 django-treebeard==4.3.1
 psycopg2==2.8.6
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability