diff --git a/requirements/optional.txt b/requirements/optional.txt
index 567257297aa82..f0da3497402c9 100644
--- a/requirements/optional.txt
+++ b/requirements/optional.txt
@@ -26,3 +26,4 @@ pyspark
 autoflake # for backend generation
 snakeviz # for profiling
 cryptography
+pyasn1>=0.6.2 # not directly required, pinned by Snyk to avoid a vulnerability