diff --git a/requirements.txt b/requirements.txt
index b1beb6f..2efd876 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,3 +2,4 @@ Django>=1.11.10
 prometheus-client>=0.1.1
 django-prometheus>=1.0.11
 psycopg2>=2.7.4
+sqlparse>=0.5.0 # not directly required, pinned by Snyk to avoid a vulnerability