diff --git a/requires-install.txt b/requires-install.txt
index 139752ea65..694053e7e5 100644
--- a/requires-install.txt
+++ b/requires-install.txt
@@ -10,3 +10,4 @@ requests
 retrying
 nest-asyncio
 setuptools
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability