diff --git a/requirements-dev.txt b/requirements-dev.txt
index 3078c16fa..fda89090b 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -23,3 +23,4 @@ pre-commit==2.4.0
 twine==3.1.1
 
 wheel==0.34.2
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability