diff --git a/requires-testing.txt b/requires-testing.txt
index cf8b8b737c..36b18da9a4 100644
--- a/requires-testing.txt
+++ b/requires-testing.txt
@@ -10,3 +10,4 @@ waitress>=1.4.4
 multiprocess>=0.70.12
 psutil>=5.8.0
 dash_testing_stub>=0.0.2
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability