diff --git a/requirements.txt b/requirements.txt
index 032d2a056..f0861b0d1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -152,3 +152,4 @@ wtforms-components==0.10.0  # via wtforms-alchemy
 wtforms==2.1              # via flask-wtf, invenio-files-rest, wtforms-alchemy, wtforms-components
 zipstream-ng==1.3.4       # via B2ShareObjectResource
 tabulate==0.8.10          # via b2share.utils.ESSearch
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability