diff --git a/py2_requirements.txt b/py2_requirements.txt
index 393df68..2c5ebac 100644
--- a/py2_requirements.txt
+++ b/py2_requirements.txt
@@ -2,3 +2,4 @@ requests>=2.4.3
 schematics==1.1.1
 munch==2.5.0
 mock
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability