diff --git a/RELEASING/requirements.txt b/RELEASING/requirements.txt
index bd3586e04c0d3..355922745774c 100644
--- a/RELEASING/requirements.txt
+++ b/RELEASING/requirements.txt
@@ -17,3 +17,4 @@
 
 cherrytree
 jinja2
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability