diff --git a/test-requirements.txt b/test-requirements.txt
index fa60f092..02ee2cd8 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -5,3 +5,4 @@ tox >= 3.9.0
 flake8 >= 4.0.0
 types-python-dateutil >= 2.8.19.14
 mypy >= 1.5
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability