diff --git a/helm/hack/requirements.txt b/helm/hack/requirements.txt
index 91a83073..d847ebef 100644
--- a/helm/hack/requirements.txt
+++ b/helm/hack/requirements.txt
@@ -1,2 +1,3 @@
 PyYAML==5.4
 requests==2.22.0
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability