diff --git a/api/requirements.txt b/api/requirements.txt
index 6f2b06a9..2349457b 100644
--- a/api/requirements.txt
+++ b/api/requirements.txt
@@ -1,3 +1,4 @@
 flask==1.1.4
 requests==2.24.0
 python-dotenv==0.14.0
+jinja2>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability