diff --git a/requirements.txt b/requirements.txt
index ea508585f..88f0d1a55 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -8,3 +8,4 @@ psutil==5.6.6
 scipy==1.0.0
 scikit-learn==0.19.1
 jinja2==2.10
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability