diff --git a/contrail-opserver/requirements.txt b/contrail-opserver/requirements.txt
index 1d284b2..cb134dc 100644
--- a/contrail-opserver/requirements.txt
+++ b/contrail-opserver/requirements.txt
@@ -11,3 +11,4 @@ cassandra-driver>=3.16,<3.27
 kafka-python==1.4.0
 kazoo == 2.7.0
 stevedore<=3.3.0
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability