diff --git a/requirements_common.txt b/requirements_common.txt
index eaac6d35518..329c4692478 100644
--- a/requirements_common.txt
+++ b/requirements_common.txt
@@ -25,3 +25,4 @@ sixpack-client==1.2.0
 psycopg2==2.8.4
 Pygments==2.4.2
 isbnlib==3.9.3
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability