diff --git a/requirements.txt b/requirements.txt
index 80ff670d..7ea1a067 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -89,3 +89,4 @@ xmltodict==0.10.2
 yamllint==1.15.0
 
 #pyyaml>=5.4 # not directly required, pinned by Snyk to avoid a vulnerability. update: this breaks Python 3.5 build where this requirement is not found
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability