diff --git a/docker-images/query-runner/requirements.txt b/docker-images/query-runner/requirements.txt
index da1962af..5e69e7f3 100644
--- a/docker-images/query-runner/requirements.txt
+++ b/docker-images/query-runner/requirements.txt
@@ -6,3 +6,4 @@ pandas==0.23.4
 psycopg2==2.7.5
 requests==2.20.0
 s3fs==0.1.6
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability