diff --git a/requirements.txt b/requirements.txt
index 8f6695e..b04a118 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -19,3 +19,4 @@ zope.interface==4.5.0
 jasmine==3.1.0
 mock==2.0.0
 pyOpenSSL==17.5.0
+urllib3>=1.26.5 # not directly required, pinned by Snyk to avoid a vulnerability