diff --git a/python/requirements.txt b/python/requirements.txt
index f4e7b20c3..7e0304a09 100644
--- a/python/requirements.txt
+++ b/python/requirements.txt
@@ -9,3 +9,4 @@ dataclasses ; python_version<'3.7'
 simple-rlp>=0.1.2 ; python_version>='3.7'
 construct-classes>=0.1.2
 base58>=2.1.1; python_version>='3.5'
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability