diff --git a/requirements-dev.txt b/requirements-dev.txt
index 9a6304f9..77856937 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -7,3 +7,4 @@ python-coveralls
 mock
 
 -r requirements.txt
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability