diff --git a/dev-requirements-2.9-py2.txt b/dev-requirements-2.9-py2.txt
index f90152de..cbf69545 100644
--- a/dev-requirements-2.9-py2.txt
+++ b/dev-requirements-2.9-py2.txt
@@ -16,3 +16,4 @@ python-magic==0.4.18
 progressbar==2.5
 
 pika>=1.1.0,<1.3.0 # resolve harvester conflict
+requests>=2.32.0 # not directly required, pinned by Snyk to avoid a vulnerability