diff --git a/requirements.txt b/requirements.txt
index 4915c0e..3fcb1d4 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,4 +13,5 @@ requests>=2.23.0
 pywin32>=305; sys_platform == "win32"
 setuptools>=56.0.0
 lockfile>=0.10
-urllib3<1.27,>=1.26.2
+urllib3<2.2.2
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability