diff --git a/requirements-dev.txt b/requirements-dev.txt
index f8f5a86..3b0e3bb 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -5,3 +5,4 @@ requests>=2.27
 djangorestframework>=3.14.0
 build>=1.2.2
 twine>=6.0.1
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability