diff --git a/scripts/gha/python_requirements.txt b/scripts/gha/python_requirements.txt
index ac784371ac..40f95d9897 100644
--- a/scripts/gha/python_requirements.txt
+++ b/scripts/gha/python_requirements.txt
@@ -3,3 +3,4 @@ absl-py
 pytz
 requests
 retry
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability