diff --git a/backend-api/requirements.txt b/backend-api/requirements.txt
index 8beeb89..364f8b9 100644
--- a/backend-api/requirements.txt
+++ b/backend-api/requirements.txt
@@ -5,7 +5,7 @@ numpy==1.24.3
 scipy==1.11.1
 yfinance==0.2.65
 requests==2.31.0
-urllib3==2.0.7
+urllib3==2.6.0
 python-dotenv==1.0.0
 gunicorn==21.2.0
 Werkzeug==2.3.7
@@ -13,3 +13,4 @@ scikit-learn==1.3.0
 matplotlib==3.7.2
 seaborn==0.12.2
 websockets>=13.0
+fonttools>=4.61.0 # not directly required, pinned by Snyk to avoid a vulnerability