diff --git a/requirements_bundles.txt b/requirements_bundles.txt
index 1151ca65..1db9bd17 100644
--- a/requirements_bundles.txt
+++ b/requirements_bundles.txt
@@ -6,3 +6,4 @@
 # These can be removed when upgrading to Python 3.x
 importlib-metadata==4.12.0  # remove when on 3.8
 importlib_resources==1.5  # remove when on 3.9
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability