diff --git a/contrail-opserver/requirements.txt b/contrail-opserver/requirements.txt
index 6aa73e8..6b6f646 100644
--- a/contrail-opserver/requirements.txt
+++ b/contrail-opserver/requirements.txt
@@ -7,3 +7,4 @@ psutil>=0.6.0,!=5.5.0,!=5.5.1
 bottle<=0.12.18
 sseclient<=0.0.26
 future<=0.18.2
+idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability