diff --git a/docs/requirements.txt b/docs/requirements.txt
index 2ebb4371e10..92ff3f6356f 100644
--- a/docs/requirements.txt
+++ b/docs/requirements.txt
@@ -1,2 +1,3 @@
 Sphinx==1.8.5
 docutils==0.17.1
+pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability