diff --git a/dev-requirements.txt b/dev-requirements.txt
index 3ccfa6f..7fec6ce 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -3,3 +3,4 @@ pytest
 redis
 pymemcache
 
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability