diff --git a/requirements.txt b/requirements.txt
index ed502c7..b16d4d5 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -10,3 +10,4 @@ PyYAML==6.0
 requests==2.27.1
 urllib3==1.26.8
 Werkzeug==2.2.3
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability