diff --git a/src/config/common/requirements.txt b/src/config/common/requirements.txt
index 644b874d7..a49b3a2bf 100644
--- a/src/config/common/requirements.txt
+++ b/src/config/common/requirements.txt
@@ -13,3 +13,4 @@ sandesh-common
 simplejson
 six
 stevedore
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability