diff --git a/requirements_dev.txt b/requirements_dev.txt
index df6e3eaf..7cd55619 100644
--- a/requirements_dev.txt
+++ b/requirements_dev.txt
@@ -8,3 +8,4 @@ black
 pre-commit
 black
 pre-commit
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability