diff --git a/requirements-to-freeze.txt b/requirements-to-freeze.txt
index cad9196..aff3b2c 100644
--- a/requirements-to-freeze.txt
+++ b/requirements-to-freeze.txt
@@ -10,3 +10,4 @@ python-dotenv
 
 flake8
 black
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability