diff --git a/setup/playbooks/roles/mirrors/files/devpi/requirements.txt b/setup/playbooks/roles/mirrors/files/devpi/requirements.txt
index 771affc7..38cc625d 100644
--- a/setup/playbooks/roles/mirrors/files/devpi/requirements.txt
+++ b/setup/playbooks/roles/mirrors/files/devpi/requirements.txt
@@ -2,3 +2,8 @@ devpi-server==5.5.1
 devpi-client
 devpi-web
 ruamel_yaml
+certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
+pygments>=2.15.0 # not directly required, pinned by Snyk to avoid a vulnerability
+requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
+waitress>=2.1.1 # not directly required, pinned by Snyk to avoid a vulnerability