diff --git a/GraphQLmap/requirements.txt b/GraphQLmap/requirements.txt
index fa4c7a3e..784de1f2 100644
--- a/GraphQLmap/requirements.txt
+++ b/GraphQLmap/requirements.txt
@@ -2,3 +2,4 @@ pyreadline ; sys_platform == 'win32'
 readline ; sys_platform !='win32'
 argparse
 requests
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability