diff --git a/api-service/test-requirements.txt b/api-service/test-requirements.txt
index 93253de97a..5cd053193c 100644
--- a/api-service/test-requirements.txt
+++ b/api-service/test-requirements.txt
@@ -1,2 +1,3 @@
 mock
 pytest
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability