diff --git a/requirements.txt b/requirements.txt
index e5e7922..819d883 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,3 +11,4 @@ rx >= 3.0.1
 six >= 1.4.0
 protobuf == 4.25.6
 couchdb >= 1.2
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability