diff --git a/requirements.txt b/requirements.txt
index fb1c9e20..f77c848e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,2 +1,3 @@
 dbt-core==0.19.0
 pyathena==2.1.1
+urllib3>=1.26.5 # not directly required, pinned by Snyk to avoid a vulnerability